CVE-2019-19193

Name of the Vulnerable Software and Affected Versions Texas Instruments SIMPLELINK-CC2640R2-SDK versions 3.30.00.20 and earlier Texas Instruments BLE-STACK versions 1.5.0 and earlier

Description The Bluetooth Low Energy peripheral implementation does not properly restrict the advertisement connection request packet on reception. This allows attackers in radio range to cause a denial of service via a crafted packet.

Recommendations For Texas Instruments SIMPLELINK-CC2640R2-SDK versions 3.30.00.20 and earlier, update to a version released after Q4 2019 to resolve the issue. For Texas Instruments BLE-STACK versions 1.5.0 and earlier, update to a version released after Q4 2019 to resolve the issue.