Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-25635 EUVD-2022-30295GHSA-75cq-hcr9-c5rg

Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Published Aug 30, 2022 · Updated Sep 16, 2024 · Assigned by twcert

Description

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.

Affected products

VendorProductAffectedFixed
Realtek Linux/Android Bluetooth Mesh SDK unspecified – ≤ 4.17-4.17-20220127 —

References