CVE-2024-6258

Summary

BT: Missing length checks of net_buf in rfcomm_handle_data

Affected Software

VendorProductVersion RangeStatus
zephyrproject-rtosZephyr* <= 3.6affected

Weaknesses

  • CWE-122: Heap-based Buffer Overflow
  • CWE-191: Integer Underflow (Wrap or Wraparound)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

References