CVE-2024-7137CWE-787

Denial of Service in Silicon Labs RS9116 Bluetooth SDK

Medium · published December 19, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
24.4
In the wild
Unconfirmed
What it is

The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a crash. A hard reset is required to recover the crashed device.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00326 · 24.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-12-19T19:23Z
EPSS history
Timeline
  • 19 DEC 19:23Z
    Denial of Service in Silicon Labs RS9116 Bluetooth SDK
    cvelistv5