CVE-2022-25635CWE-120

Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Medium · published August 30, 2022

CVSS v3.1
6.5
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2022-08-30T04:25Z
EPSS history
Timeline
  • 30 AUG 04:25Z
    Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
    cvelistv5