PT-2023-8755

CVE-2023-5753

Publicado

2023-10-24

Atualizado

2024-01-12

Descrição por

CVSS 3.1

8.8

Alta

MétricasAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zephyr (affected versions not specified)

Description The issue is related to potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci core.c. This vulnerability is associated with unverified copying of input data, which may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Explorabilidade

Exploit

Impactos

Pesquisadores

0Xdea

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')

CWE-191: Integer Underflow (Wrap or Wraparound)

Identificadores relacionados