CVE-2022-25635: Realtek Bluetooth Mesh Software Development Kit

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.

Affected products

• Realtek Bluetooth Mesh Software Development Kit: up to and including 4.17-4.17-20220127

Published 2022-08-30. Last modified 2026-06-17.