Skip to content
Sign in
6.5 Medium

CVE-2024-7139 Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow

Description

Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow triggers an assert, which results in a temporary denial of service.  If a watchdog timer is not enabled, a hard reset is required to recover the device.

Affected products and versions

Product Affected versions Fixed in
RS9116 Bluetooth SDK 2.10 earliest → 2.10.4 No fix stated

Other CVEs of RS9116 Bluetooth SDK

The 3 CVEs of RS9116 Bluetooth SDK →
CVE-2024-7138 An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed… 6.5 Medium CVE-2024-7137 The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported… 6.5 Medium
Track this CVE