CVE-2025-40309 Bluetooth: SCO: Fix UAF on sco_conn_free

Api.Msrc.Microsoft • December 9, 2025

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Bluetooth Vulnerabilities Addressed in Recent Microsoft Updates Microsoft has published information on two critical Bluetooth vulnerabilities: CVE-2025-40309 and CVE-2025-39981. The first vulnerability involves a use-after-free (UAF) issue in the SCO connection handling, while the second addresses possible UAFs in the MGMT protocol. Affected systems include those utilizing Bluetooth technology. 2 sources 48

Extracted Entities

CVEs (1)

Platforms (1)

Vulnerabilities (1)