Vulnerability · Published Dec 19, 2024 · Assigned by Silabs
CVE-2024-7137Denial of Service in Silicon Labs RS9116 Bluetooth SDK
Medium 6.5
In plain English
A medium-severity out-of-bounds write in RS9116 Bluetooth SDK from silabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 74.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a crash. A hard reset is required to recover the crashed device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| silabs.com | RS9116 Bluetooth SDK | 0 – through 2.10.4 |
Weakness: CWE-787 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://community.silabs.com/068Vm00000I5mjD vendor-advisory, permissions-required