OOB Access Vulnerability in get_att_search_list

CVE-2024-6137

What is CVE-2024-6137?

An out-of-bounds access vulnerability has been identified in the Bluetooth Classic Service Discovery Protocol (SDP) implementation within the Zephyr RTOS. This issue arises during the handling of function calls that can lead to data corruption or unexpected behavior. Affected versions may allow an attacker to exploit this flaw, potentially compromising the system's integrity. Users of affected versions should apply the latest patches to mitigate the risk associated with this vulnerability.

References