CVE-2025-35003 Apache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.

What is CVE-2025-35003?

CVE-2025-35003 is a critical vulnerability in Apache NuttX RTOS, published on 26 May 2025.

Official description

Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bluetooth Stack (HCI and UART components) that may result in system crash, denial of service, or arbitrary code execution, after receiving maliciously crafted packets.

NuttX's Bluetooth HCI/UART stack users are advised to upgrade to version 12.9.0, which fixes the identified implementation issues.

This issue affects Apache NuttX: from 7.25 before 12.9.0.

Weakness: CWE-121, CWE-119

Which versions are affected by CVE-2025-35003?

It affects 1 product.

Products include Apache Nuttx.

How do I fix CVE-2025-35003?

No fix has been published for CVE-2025-35003 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-35003 being exploited?

There is no known exploitation of CVE-2025-35003 in the wild and no public exploit code.

Other vulnerabilities in Apache NuttX RTOS

• CVE-2025-47868 Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition. Critical 9.8
• CVE-2025-47869 Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size. Critical 9.8
• CVE-2021-26461 malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds Critical 9.8
• CVE-2020-17529 Apache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP header Critical 9.8
• CVE-2020-1939 Null dereference in Apache NuttX (incubating) Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-v6p6-vqmj-q998.