Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-26528 EUVD-2022-31085GHSA-mm97-wh26-7377

Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Published Aug 30, 2022 · Updated Sep 16, 2024 · Assigned by twcert

Description

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.

Affected products

VendorProductAffectedFixed
Realtek Linux/Android Bluetooth Mesh SDK unspecified – ≤ 4.17-4.17-20220127 —

References