Vulnerability · Published Jul 12, 2024 · Assigned by Silabs
CVE-2023-41093Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse
Low 3.1
In plain English
A low-severity use-after-free in Simplicity SDK from Silicon Labs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS 3.1)3.1Low
Exploit odds (30 days)0.2%top 91.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Use After Free vulnerability in Silicon Labs Bluetooth SDK on 32 bit, ARM may allow an attacker with precise timing capabilities to intercept a small number of packets intended for a recipient that has left the network.This issue affects Silabs Bluetooth SDK: through 8.0.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Silicon Labs | Simplicity SDK | 0 – through 8.0.0 |
Weakness: CWE-416 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N