CVE-2022-26447

In BT firmware, there is a possible out of bounds write due to a missing bounds check

published September 6, 2022

CVSS
—
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

⚡ A sneaky out of bounds write in BT firmware could let attackers execute commands without any user interaction! 🔥 Think of it like a delivery truck that’s supposed to stop at a specific loading dock but instead drives right off the premises, dropping packages anywhere they please, potentially causing chaos! This vulnerability provides an attacker with the ability to run arbitrary code remotely, which could lead to a complete compromise of the system without needing any permissions. Imagine a scenario where your trusted network device suddenly becomes a gateway for unauthorized access!

Put simply

Think of it like a delivery truck that’s supposed to stop at a specific loading dock but instead drives right off the premises, dropping packages anywhere they please, potentially causing chaos! CVE-2022-26447 arises from a missing bounds check in BT firmware, allowing an out of bounds write, which could easily be exploited to achieve remote code execution.

What to do

This vulnerability provides an attacker with the ability to run arbitrary code remotely, which could lead to a complete compromise of the system without needing any permissions. Imagine a scenario where your trusted network device suddenly becomes a gateway for unauthorized access! Make sure to apply the patch ID ALPS06784478 as soon as possible to secure your devices. Regularly update your firmware to ensure you’re protected against any future vulnerabilities. You've got this! Keep your systems safe and sound with those updates! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00737 · 54.0th percentile
Published
2022-09-06T17:19Z
EPSS history
Timeline
  • 06 SEP 17:19Z
    In BT firmware, there is a possible out of bounds write due to a missing bounds check
    cvelistv5