Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-26528

Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Realtek Linux/Android Bluetooth Mesh SDK

  • unspecified to ≤ 4.17-4.17-20220127affected

References