What’s Vulnerable › Vulnerabilities
CVE-2021-31610
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-09-07 · updated 2026-06-17
Description
The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (either restart or deadlock the device) by flooding a device with LMP_AU_rand data.
Affected products
- Bluetrum Ab5376T Firmware: all versions
- Bluetrum Bt8896A Firmware: all versions
- Mi True Wireless Earbuds Basic 2 Firmware: all versions
References
- http://www.bluetrum.com/product/ab5376t.html
- http://www.bluetrum.com/product/bt8896a.html
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://www.mi.com/global/mi-true-wireless-earbuds-basic-2/
- http://www.bluetrum.com/product/ab5376t.html
- http://www.bluetrum.com/product/bt8896a.html
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://www.mi.com/global/mi-true-wireless-earbuds-basic-2/
Get alerted when CVE-2021-31610 or the next vulnerability affects your stack