CVE-2022-0204CWE-119

A heap overflow vulnerability was found in bluez in versions prior to 5.63

High · published March 9, 2022

CVSS v3.1
8.8
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01793 · 78.2th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2022-03-09T00:00Z
EPSS history
Timeline
  • 09 MAR 00:00Z
    A heap overflow vulnerability was found in bluez in versions prior to 5.63
    cvelistv5