Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-2683 EUVD-2023-34147GHSA-xgxr-3384-47xm

Connection update while closing connection may lead to denial-of-service

Published Jun 15, 2023 · Updated Dec 11, 2024 · Assigned by Silabs

Description

A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error.

Affected products

VendorProductAffectedFixed
silabs.com Bluetooth SDK 5.0.0 – ≤ v5.1.1 —

References