CVE-2021-31787: Actions-Semi ATS2815 Firmware

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown of a device by flooding the target device with LMP_features_res packets.

Affected products

• Actions-Semi ATS2815 Firmware: affected versions not specified
• Actions-Semi ATS2819 Firmware: affected versions not specified
• Actions-Semi ATS2819P Firmware: affected versions not specified
• Actions-Semi ATS2819S Firmware: affected versions not specified
• Actions-Semi ATS2819T Firmware: affected versions not specified

Published 2021-11-30. Last modified 2026-06-17.