Buffer Overflow Vulnerability in Cypress CYW20735 Evaluation Board

CVE-2019-18614

What is CVE-2019-18614?

The vulnerability found in the Cypress CYW20735 evaluation board facilitates a buffer overflow due to a mismatch in maximum buffer sizes for data transmission. The BLOC buffer is limited to 384 bytes, while the usual size of 1092 bytes remains set for other configurations. This discrepancy allows an attacker to exploit this vulnerability by transmitting packets either wirelessly or as a local user, leading to potential unauthorized access or system disruption. The buffer overflow can easily be triggered by attempting to open any ACL or SCO connection.

References