Vulnerability · Published Feb 15, 2024 · Assigned by Silabs
CVE-2024-0240Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients
Medium 6.5
In plain English
A medium-severity memory leak in GSDK from silabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 70.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| silabs.com | GSDK | 0 – before 4.3.0 |
Weakness: CWE-401 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H