CVE-2025-12035: Zephyrproject-Rtos Zephyr

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An integer overflow condition exists in Bluetooth Host stack, within the bt_br_acl_recv routine a critical path for processing inbound BR/EDR L2CAP traffic.

Affected products

Published 2025-12-15. Last modified 2026-10-07.