CVE-2019-17519

The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers in radio range to cause a buffer overflow via a crafted packet.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-02-12

Last modified

2024-08-05

Weaknesses

CWE-120

Affected products

• Mcuxpresso Software Development Kit (Nxp)

References

• https://asset-group.github.io/disclosures/sweyntooth/