CVE-2021-34146: Cypress CYW20735B1 Firmware

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart (crash) of the device by flooding it with LMP_AU_Rand packets after the paging procedure.

Affected products

• Cypress CYW20735B1 Firmware: affected versions not specified
• Cypress CYW920735Q60EVB-01 Firmware: affected versions not specified

Published 2021-09-07. Last modified 2026-06-17.