CVE-2021-28139
N/A
N/A
Summary
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield payload.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://github.com/espressif/esp-idf
- https://github.com/espressif/esp32-bt-lib
- https://www.espressif.com/en/products/socs/esp32
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
References
- https://github.com/espressif/esp-idf
- https://github.com/espressif/esp32-bt-lib
- https://www.espressif.com/en/products/socs/esp32
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.