CVE-2023-0775

Summary

An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a denial-of-service.

Affected Software

Weaknesses

• CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000SMMyGQAX?operationContext=S1
• https://github.com/SiliconLabs/gecko_sdk

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000SMMyGQAX?operationContext=S1
• https://github.com/SiliconLabs/gecko_sdk

• ←Previous
• Next→