Do Son Apache NimBLE flaws (CVE-2025-62235) allow Bluetooth spoofing and eavesdropping. Update to v1.9.0 now to secure your IoT devices against attacks.
embedded systems
wolfSSH 1.4.22 patches critical flaw CVE-2025-14942 (CVSS 9.4). The bug allows attackers to bypass authentication and steal passwords. Update immediately.
Apache NuttX patches a moderate Use After Free (CVE-2025-48769) and a DoS flaw in its filesystem. Network-exposed devices must upgrade to v12.11.0.
A critical LPE (CVE-2025-14282) in Dropbear SSH allows users to gain root access via Unix socket forwarding. Impacting embedded Linux, it's fixed in v2025.89.
vivo launches BlueOS, a new open-source OS kernel written in Rust, emphasizing security, minimalism, and broad support for Arm and RISC-V architectures in various terminal devices.
wolfSSL 5.8.2 patches four vulnerabilities, including a critical Apple trust store bypass (CVE-2025-7395) and predictable randomness after fork(), impacting secure communications.
Nvidia released patches for critical vulnerabilities (CVE-2025-23270, CVE-2025-23269) in Jetson Linux and IGX, allowing RCE, data tampering, and info disclosure.
Raspberry Pi launched a $4 Radio Module 2, offering Wi-Fi 4 and Bluetooth 5.2 to custom boards. It's pre-certified and ideal for low-cost IoT projects.
A critical RCE flaw in QNX SDP's PCX image codec exposes systems to DoS or code execution. Patch immediately if using affected versions.
Amazon warns of a high-severity (CVSS 8.4) memory corruption flaw (CVE-2025-5688) in FreeRTOS-Plus-TCP. Patch immediately to prevent crashes and RCE in affected devices.