CVE-2021-31786: Actions-Semi ATS2815 Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forged BDAddress that matches the original connected host.

Affected products

• Actions-Semi ATS2815 Firmware: affected versions not specified
• Actions-Semi ATS2819 Firmware: affected versions not specified
• Actions-Semi ATS2819P Firmware: affected versions not specified
• Actions-Semi ATS2819S Firmware: affected versions not specified
• Actions-Semi ATS2819T Firmware: affected versions not specified

Published 2021-09-07. Last modified 2026-06-17.