CVE-2022-26527CWE-120

Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Medium · published August 30, 2022

CVSS v3.1
6.5
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00469 · 39.6th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2022-08-30T04:25Z
EPSS history
Timeline
  • 30 AUG 04:25Z
    Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow
    cvelistv5