Buffer Overflow Vulnerability in Silicon Labs Bluetooth Products

CVE-2024-7137

What is CVE-2024-7137?

CVE-2024-7137 is a high-risk vulnerability affecting the L2CAP (Logical Link Control and Adaptation Protocol) communication protocol implemented in various Silicon Labs Bluetooth products. This vulnerability arises from an inadequate buffer length for L2CAP packets. When an oversized packet is received, it may exceed the restricted buffer limit, leading to a buffer overflow condition. As a result, the affected device can crash, necessitating a hard reset for recovery. Users and organizations utilizing affected Silicon Labs products should consider immediate mitigation measures to prevent potential service disruptions and security risks.

References