CVE-2021-34148

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via a crafted LMP packet.

• https://dl.packetstormsecurity.net/papers/general/braktooth.pdfTechnical Description, Third Party Advisory
• https://www.cypress.com/documentation/datasheets/cyw20735b1-single-chip-bluetooth-transceiver-wireless-input-devicesVendor Advisory
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdfTechnical Description, Third Party Advisory
• https://www.cypress.com/documentation/datasheets/cyw20735b1-single-chip-bluetooth-transceiver-wireless-input-devicesVendor Advisory

Published

Sep 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34141An incomplete string comparison in the numpy.core component …5.3
• CVE-2021-34143The Bluetooth Classic implementation in the Zhuhai Jieli AC6…6.5
• CVE-2021-34144The Bluetooth Classic implementation in the Zhuhai Jieli AC6…6.5
• CVE-2021-34145The Bluetooth Classic implementation in the Cypress WICED BT…5.3
• CVE-2021-34146The Bluetooth Classic implementation in the Cypress CYW92073…6.5
• CVE-2021-34147The Bluetooth Classic implementation in the Cypress WICED BT…6.5
• CVE-2021-34149The Bluetooth Classic implementation on the Texas Instrument…6.5
• CVE-2021-34150The Bluetooth Classic implementation on Bluetrum AB5301A dev…6.5
• CVE-2021-3416A potential stack overflow via infinite loop issue was found…6
• CVE-2021-34164Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authen…8.8
• CVE-2021-34165A SQL Injection vulnerability in Sourcecodester Basic Shoppi…9.8
• CVE-2021-34166A SQL INJECTION vulnerability in Sourcecodester Simple Food …9.8