Description
Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that triggers a buffer overflow.
References
- https://armis.com/bleedingbit/
- http://e2e.ti.com/support/wireless-connectivity/bluetooth/f/538/t/742827
- 1042018 vdb-entry
- VU#317277 third-party-advisory
- 105812 vdb-entry
- 20181101 Texas Instruments Bluetooth Low Energy Denial of Service and Remote Code Execution Vulnerability vendor-advisory