CVE-2025-44526: realtek rtl8762e_software_development_kit Improper Input Validation
CVSS: 6.5v3.1MediumModified
Published 09-07-2025Last modified 05-07-2026
Vulnerability summary
CVE-2025-44526 is a medium (CVSS 6.5) Improper Input Validation vulnerability in realtek rtl8762e_software_development_kit. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 25.2% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
6.5/10
010
Medium · v3.1 (CVE.org)EPSS score
0.33%
0%100%
Low · +0.05 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github
Timeline
- 09-07-2025PublishedVulnerability first disclosed.
- 05-07-2026Last modifiedVulnerability information updated.
Description
Realtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy (BLE) data packets. This issue allows attackers to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet.
CVSS metrics
2 scores · 2 sources · 1 versionMedium 6.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSourcesAll 2 agree
- NVDNIST6.5MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.33%
Chance of exploitation in the next 30 days
Percentile
25%
Versus all other CVEs
30-day change
+0.05 pp
From 0.29% on 19-09-2026
19-09-202619-10-2026
EPSS score0.33%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundBle Test
Maturity: poc
Weaknesses
CWE · root cause- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Affected systems
Realtek1 product
1 vendor · 1 product