Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow

CVE-2023-6387

What is CVE-2023-6387?

The vulnerability presents a potential buffer overflow in the Bluetooth LE HCI CPC sample application, part of the Gecko SDK provided by Silicon Labs. This flaw can be exploited to cause a denial of service or enable remote code execution, exposing devices using this SDK to significant security risks. Users of the affected versions should take immediate steps to mitigate potential threats by applying available patches or updates.

References