CVE-2021-31610

—

CVSS 3.1

6.5 medium

EPSS

<1%p45

Published

Sep 7, 2021 (Sep 7, 2021)

Modified

Jun 17, 2026

Description

The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (either restart or deadlock the device) by flooding a device with LMP_AU_rand data.

Vendors: mi bluetrum
Products: mi true wireless earbuds basic 2 firmware, ab5376t firmware, bt8896a firmware
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.