CVE-2022-25635

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.

Score

CVSS 3.1 6.5 Medium

Status

Modified - twcert@cert.org.tw

Published

2022-08-30

Last modified

2024-09-16

Weaknesses

CWE-120

Affected products

• Bluetooth Mesh Software Development Kit (Realtek)
• Linuxandroid Bluetooth Mesh Sdk (Realtek)

References

• https://www.twcert.org.tw/tw/cp-132-6456-fc6c5-1.html