CVE-2024-7138

Summary

An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device.

Affected Software

VendorProductVersion RangeStatus
silabs.comRS9116 Bluetooth SDK0 <= 2.10.4affected

Weaknesses

  • CWE-617: CWE-617 Reachable Assertion

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References