Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-26527 EUVD-2022-31084GHSA-63gh-5vqp-xfgp

Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Published Aug 30, 2022 · Updated Sep 16, 2024 · Assigned by twcert

Description

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.

Affected products

VendorProductAffectedFixed
Realtek Linux/Android Bluetooth Mesh SDK unspecified – ≤ 4.17-4.17-20220127 —

References