CVE-2023-0397

A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete.

Score

CVSS 3.1 9.6 Critical

Status

Modified - vulnerabilities@zephyrproject.org

Published

2023-01-19

Last modified

2025-04-03

Weaknesses

CWE-665, CWE-703

Affected products

• Zephyr (Zephyrproject)
• Zephyr (Zephyrproject-rtos)

References

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wc2h-h868-q7hj