Description
In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| zephyrproject-rtos | zephyr | unspecified – ≤ v3.0 | — |
High · 8.2
CVE-2022-1041
EUVD-2022-24388
Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning
Published Jul 26, 2022 · Updated Sep 17, 2024 · Assigned by zephyr