CVE-2023-6387CWE-125CWE-787

Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow

High · published February 2, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote code execution

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00614 · 48.7th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-787 · Out-of-bounds Write
Published
2024-02-02T15:18Z
EPSS history
Timeline
  • 02 FEB 15:18Z
    Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow
    cvelistv5