Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-1902 EUVD-2023-24091

HCI Connection Creation Dangling State Reference Re-use

Published Jul 10, 2023 · Updated Nov 7, 2024 · Assigned by zephyr

Description

The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS) or potential RCE on the Host layer.

Affected products

VendorProductAffectedFixed
zephyrproject-rtos Zephyr — —

References