<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: wireless internet connectivity for embedded devices</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2021-34148: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does n</title><link>https://patchthecve.com/cve/CVE-2021-34148.html</link><guid>https://patchthecve.com/cve/CVE-2021-34148.html</guid><pubDate>Wed, 17 Jun 2026 03:55:30 +0000</pubDate><description>MEDIUM 6.5: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firm</description></item><item><title>CVE-2021-34147: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not prope</title><link>https://patchthecve.com/cve/CVE-2021-34147.html</link><guid>https://patchthecve.com/cve/CVE-2021-34147.html</guid><pubDate>Wed, 17 Jun 2026 03:55:30 +0000</pubDate><description>MEDIUM 6.5: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing attackers to exhaust device BT resources and eventually tr</description></item><item><title>CVE-2021-34145: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does n</title><link>https://patchthecve.com/cve/CVE-2021-34145.html</link><guid>https://patchthecve.com/cve/CVE-2021-34145.html</guid><pubDate>Wed, 17 Jun 2026 03:55:30 +0000</pubDate><description>MEDIUM 5.3: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with an invalid Baseband packet type (and LT_ADDRESS and LT_ADDR) after completion of the LMP setup procedure, allowing attackers in radio ra</description></item></channel></rss>