CVE-2020-10061

Description

Improper handling of the full-buffer case in the Zephyr Bluetooth implementation can result in memory corruption. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-75 ↗
• https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10061 ↗
• https://github.com/zephyrproject-rtos/zephyr/pull/23516 ↗
• https://github.com/zephyrproject-rtos/zephyr/pull/23517 ↗
• https://github.com/zephyrproject-rtos/zephyr/pull/23547 ↗
• https://github.com/zephyrproject-rtos/zephyr/pull/23091 ↗