Vulnerability · Published Dec 19, 2024 · Assigned by Silabs
CVE-2024-7138Denial of Service in Silicon Labs RS9116 Bluetooth SDK
Medium 6.5
In plain English
A medium-severity security flaw in RS9116 Bluetooth SDK from silabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.2%top 84.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| silabs.com | RS9116 Bluetooth SDK | 0 – through 2.10.4 |
Weakness: CWE-617 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://community.silabs.com/068Vm00000I5mjD vendor-advisory, permissions-required