CVE-2023-33092CWE-120

Buffer Copy Without Checking Size of Input in Bluetooth HOST

High · published December 5, 2023

CVSS v3.1
8.4
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-12-05T03:04Z
EPSS history
Timeline
  • 05 DEC 03:04Z
    Buffer Copy Without Checking Size of Input in Bluetooth HOST
    cvelistv5