CVE-2024-6258

BT: Missing length checks of net_buf in rfcomm_handle_data

Score

CVSS 3.1 6.8 Medium

Status

Modified - vulnerabilities@zephyrproject.org

Published

2024-09-13

Last modified

2025-09-17

Weaknesses

CWE-122, CWE-191

Affected products

• Zephyr (Zephyrproject)
• Zephyr (Zephyrproject-rtos)

References

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7833-fcpm-3ggm