Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-3454 EUVD-2021-26777

Truncated L2CAP K-frame causes assertion failure

Published Oct 19, 2021 · Updated Sep 17, 2024 · Assigned by zephyr

Vendor: zephyrproject-rtos Product: Zephyr

Description

Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsistency (CWE-130), Reachable Assertion (CWE-617). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fx88-6c29-vrp3

Affected products

VendorProductAffectedFixed
zephyrproject-rtos zephyr 2.4.0 – < unspecified, v.2.50 – < unspecified unspecified

References