CVE-2023-0397CWE-703

DoS: Invalid Initialization in le_read_buffer_size_complete

Critical · published January 19, 2023

CVSS v3.1
9.6
EPSS
0%
Percentile
39.8
In the wild
Unconfirmed
What it is

🔥 A mischievous Bluetooth controller can bring your devices to a standstill! Think of it like an overzealous traffic cop — if they can dictate the flow without checks, they might just decide to halt all cars at a busy intersection indefinitely, causing chaos. This vulnerability could result in a catastrophic Denial of Service, effectively locking out all Bluetooth connectivity on affected devices. Imagine your headphones, smart speakers, or any other Bluetooth gadget suddenly refusing to connect — completely sidelining your tech and leaving you frustrated!

Put simply

Think of it like an overzealous traffic cop — if they can dictate the flow without checks, they might just decide to halt all cars at a busy intersection indefinitely, causing chaos. CVE-2023-0397 stems from unchecked input in the le_read_buffer_size_complete function, allowing a malicious Bluetooth controller to disrupt operations, leading to service outages.

What to do

This vulnerability could result in a catastrophic Denial of Service, effectively locking out all Bluetooth connectivity on affected devices. Imagine your headphones, smart speakers, or any other Bluetooth gadget suddenly refusing to connect — completely sidelining your tech and leaving you frustrated! To protect your devices, ensure that any firmware updates are applied promptly to address this vulnerability. Additionally, monitor your Bluetooth devices for any abnormal behavior and consider disabling Bluetooth when not in use as a precaution. You've got this! Stay vigilant and secure your devices from this sneaky threat! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00471 · 39.8th percentile
Weakness
CWE-703 · Improper Check or Handling of Exceptional Conditions
Published
2023-01-19T00:00Z
EPSS history
Timeline
  • 19 JAN 00:00Z
    DoS: Invalid Initialization in le_read_buffer_size_complete
    cvelistv5