Skip to content
Sign in
6.5 Medium

CVE-2024-7137 The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported…

Description

The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a crash. A hard reset is required to recover the crashed device.

Affected products and versions

Product Affected versions Fixed in
RS9116 Bluetooth SDK 2.10 earliest → 2.10.4 No fix stated

Other CVEs of RS9116 Bluetooth SDK

The 3 CVEs of RS9116 Bluetooth SDK →
CVE-2024-7139 Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow 6.5 Medium CVE-2024-7138 An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed… 6.5 Medium
Track this CVE