Buffer Overflow Vulnerability in MBed OS by Arm
CVE-2024-48984

9.8CRITICAL

Key Information:

Vendor

Arm
Status
MBed OS
Vendor
CVE Published:
20 November 2024

What is CVE-2024-48984?

A buffer overflow vulnerability has been identified in MBed OS 6.16.0, where the hci parsing logic fails to validate the integrity of report data. During the processing of hci reports, the software dynamically reads byte lengths which are essential for allocating appropriate buffers for each report. However, this mechanism does not adequately ensure that the allocated memory boundaries are respected. In certain scenarios, this oversight could allow for the overwriting of report length fields, leading to potential exploitation through crafted inputs that result in memory corruption and data access violations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/mbed-ce/mbed-os/blob/54e8693ef4ff7e025...
https://github.com/mbed-ce/mbed-os/pull/387

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.