CVE-2021-34143: Zh-Jieli Fw-AC63 Bt SDK

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C_DEMO_V1.0 does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (deadlock) of the device by flooding it with LMP_AU_Rand packets after paging procedure. User intervention is required to restart the device.

Affected products

• Zh-Jieli Fw-AC63 Bt SDK: version 1.0.0 only

Published 2021-09-07. Last modified 2026-06-17.