CVE-2024-7137 — Denial of Service in Silicon Labs RS9116 Bluetooth SDK

CVE-2024-7137

Denial of Service in Silicon Labs RS9116 Bluetooth SDK PUBLISHED

Description (CNA)

The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a crash. A hard reset is required to recover the crashed device.

Affected (CNA)

Vendor / product	Versions
silabs.com / RS9116 Bluetooth SDK	affected 0 through 2.10.4

CWE

CWE-787

References

https://community.silabs.com/068Vm00000I5mjD

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.