CVE-2019-17520

Name of the Vulnerable Software and Affected Versions Texas Instruments SDK versions through 3.30.00.20 for CC2640R2 devices

Description The issue is related to the Bluetooth Low Energy implementation, which does not properly restrict the SM Public Key packet on reception. This allows attackers within radio range to cause a denial of service, resulting in a crash, by sending crafted packets.

Recommendations For Texas Instruments SDK versions through 3.30.00.20, update to a version that properly restricts the SM Public Key packet on reception to prevent denial of service attacks.