Skip to content
OpenAdvisories
Unscored CVE-2021-28135 EUVD-2021-14834GHSA-jff7-h8x2-v2hj

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited …

Published Sep 7, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (crash) in ESP32 by flooding the target device with LMP Feature Response data.

References