CVE-2021-31785

The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device via crafted LMP packets. Manual user intervention is required to restart the device and restore Bluetooth communication.

• CWE-667

• https://dl.packetstormsecurity.net/papers/general/braktooth.pdfTechnical Description, Third Party Advisory
• https://launchstudio.bluetooth.com/ListingDetails/76427Third Party Advisory
• https://www.actions-semi.com/index.php?id=3581&siteId=4Broken Link, Vendor Advisory
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdfTechnical Description, Third Party Advisory
• https://launchstudio.bluetooth.com/ListingDetails/76427Third Party Advisory
• https://www.actions-semi.com/index.php?id=3581&siteId=4Broken Link, Vendor Advisory

Published

Sep 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31778The media2click (aka 2 Clicks for External Media) extension …5.4
• CVE-2021-31779The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYP…6.4
• CVE-2021-3178fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when t…6.5
• CVE-2021-31780In app/Model/MispObject.php in MISP 2.4.141, an incorrect sh…7.5
• CVE-2021-31783show_default.php in the LocalFilesEditor extension before 11…7.5
• CVE-2021-31784An out-of-bounds write vulnerability exists in the file-read…7.8
• CVE-2021-31786The Bluetooth Classic Audio implementation on Actions ATS281…6.5
• CVE-2021-31787The Bluetooth Classic implementation on Actions ATS2815 chip…6.5
• CVE-2021-3179GGLocker iOS application, contains an insecure data storage …5.5
• CVE-2021-31791In Hardware Sentry KM before 10.0.01 for BMC PATROL, a clear…7.5
• CVE-2021-31792XSS in the client account page in SuiteCRM before 7.11.19 al…5.4
• CVE-2021-31793An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 dev…7.5