CVE-2023-0397
19.01.2023, 06:15
A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete.Enginsight
| Vendor | Product | Version |
|---|---|---|
| zephyrproject | zephyr | 𝑥 ≤ 3.2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-703 - Improper Check or Handling of Exceptional ConditionsThe software does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the software.
- CWE-665 - Improper InitializationThe software does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.