Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-26529 EUVD-2022-31086GHSA-f34r-99x7-mp7j

Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Published Aug 30, 2022 · Updated Sep 17, 2024 · Assigned by twcert

Description

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.

Affected products

VendorProductAffectedFixed
Realtek Linux/Android Bluetooth Mesh SDK unspecified – ≤ 4.17-4.17-20220127 —

References