Memory Leak in Silicon Labs' Bluetooth Stack May Cause Operations to Stop
CVE-2024-0240

6.5MEDIUM

Key Information:

Vendor

silabs.com

Status
GSDK
Vendor
CVE Published:
15 February 2024

What is CVE-2024-0240?

A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.

Affected Version(s)

GSDK 0 < 4.3.0

References

https://github.com/SiliconLabs/gecko_sdk
https://community.silabs.com/069Vm000001AjEfIAK

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.