CVE-2023-0397

Summary

A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete.

Affected Software

VendorProductVersion RangeStatus
zephyrproject-rtoszephyrunspecified <= v3.2affected

Weaknesses

  • CWE-703: Improper Check or Handling of Exceptional Conditions (CWE-703)

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References