CVE-2024-6444

No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - vulnerabilities@zephyrproject.org

Published

2024-10-04

Last modified

2024-10-04

Weaknesses

CWE-122, CWE-787

Affected products

• Zephyr (Zephyrproject)
• Zephyr (Zephyrproject-rtos)

References

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-qj4r-chj6-h7qp