Vulnerability · Published Dec 19, 2024 · Assigned by Silabs
CVE-2024-7139Denial of Service in Silicon Labs RS9116 Bluetooth SDK
Medium 6.5
In plain English
A medium-severity out-of-bounds write in RS9116 Bluetooth SDK from silabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 74.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow triggers an assert, which results in a temporary denial of service. If a watchdog timer is not enabled, a hard reset is required to recover the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| silabs.com | RS9116 Bluetooth SDK | 0 – through 2.10.4 |
Weakness: CWE-787, CWE-617 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://community.silabs.com/068Vm00000I5mjD vendor-advisory, permissions-required