CVE-2021-34146

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart (crash) of the device by flooding it with LMP_AU_Rand packets after the paging procedure.

• https://dl.packetstormsecurity.net/papers/general/braktooth.pdfTechnical Description, Third Party Advisory
• https://www.cypress.com/documentation/datasheets/cyw20735b1-single-chip-bluetooth-transceiver-wireless-input-devicesVendor Advisory
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdfTechnical Description, Third Party Advisory
• https://www.cypress.com/documentation/datasheets/cyw20735b1-single-chip-bluetooth-transceiver-wireless-input-devicesVendor Advisory

Published

Sep 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3413A flaw was found in Red Hat Satellite in tfm-rubygem-foreman…6.3
• CVE-2021-3414A flaw was found in satellite. When giving granular permissi…8.1
• CVE-2021-34141An incomplete string comparison in the numpy.core component …5.3
• CVE-2021-34143The Bluetooth Classic implementation in the Zhuhai Jieli AC6…6.5
• CVE-2021-34144The Bluetooth Classic implementation in the Zhuhai Jieli AC6…6.5
• CVE-2021-34145The Bluetooth Classic implementation in the Cypress WICED BT…5.3
• CVE-2021-34147The Bluetooth Classic implementation in the Cypress WICED BT…6.5
• CVE-2021-34148The Bluetooth Classic implementation in the Cypress WICED BT…6.5
• CVE-2021-34149The Bluetooth Classic implementation on the Texas Instrument…6.5
• CVE-2021-34150The Bluetooth Classic implementation on Bluetrum AB5301A dev…6.5
• CVE-2021-3416A potential stack overflow via infinite loop issue was found…6
• CVE-2021-34164Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authen…8.8