CVE-2024-2105 MEDIUM

CVE-2024-2105: JBL: Improper validation of ICM field in connection requests

Vendor Jbl
Product Flip 5
Weakness CWE-1287
Published December 10, 2025
Last update December 10, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices.

Key dates

02Disclosure timeline

December 10, 2025 CVE published
December 10, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-20244 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability CVE-2024-48851 Remote Code Execution CVE-2026-2004 PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code CVE-2026-9521 fraillt bitsery std_smart_ptr.h loadFromSharedState improper validation of specified type of input CVE-2026-11460 Boost Serialization improper validation of specified type of input