CVE-2023-0775CWE-20

Bluetooth LE Invalid prepare write request command leads to denial of service

Medium · published March 28, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
22.8
In the wild
Unconfirmed
What it is

An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a denial-of-service.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00312 · 22.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-03-28T16:23Z
EPSS history
Timeline
  • 28 MAR 16:23Z
    Bluetooth LE Invalid prepare write request command leads to denial of service
    cvelistv5