What’s Vulnerable › Vulnerabilities

CVE-2021-31612

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-07 · updated 2026-06-17

Description

The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet.

Affected products

• Zh-Jieli Ac6901 Firmware: all versions
• Zh-Jieli Ac6902 Firmware: all versions
• Zh-Jieli Ac6903 Firmware: all versions
• Zh-Jieli Ac6904 Firmware: all versions
• Zh-Jieli Ac6905 Firmware: all versions
• Zh-Jieli Ac6907 Firmware: all versions
• Zh-Jieli Ac6908 Firmware: all versions
• Zh-Jieli Ac690N Firmware: all versions
• Zh-Jieli Ac692N Firmware: all versions
• Zh-Jieli Ac6997 Firmware: all versions
• Zh-Jieli Ac6998 Firmware: all versions
• Zh-Jieli Ac6999 Firmware: all versions

References

• http://www.zh-jieli.com/product/68-cn.html
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
• https://launchstudio.bluetooth.com/ListingDetails/19746
• http://www.zh-jieli.com/product/68-cn.html
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
• https://launchstudio.bluetooth.com/ListingDetails/19746

Get alerted when CVE-2021-31612 or the next vulnerability affects your stack