Missing Check in Packet Leads to Division by Zero

CVE-2024-4785

What is CVE-2024-4785?

A vulnerability exists in the Zephyr Project RTOS that arises from a missing validation check associated with the LL_CONNECTION_UPDATE_IND packet. This oversight can potentially result in a division by zero error, compromising system stability and reliability. As a result, devices utilizing the Bluetooth functionality in the affected versions may experience unexpected behavior under specific conditions.

References