CVE-2023-2234CWE-843

BT HCI host union variant confusion

Medium · published July 10, 2023

CVSS v3.1
6.8
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00497 · 41.7th percentile
Weakness
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2023-07-10T04:33Z
EPSS history
Timeline
  • 10 JUL 04:33Z
    BT HCI host union variant confusion
    cvelistv5