VULNERABILITY INTELLIGENCE

CVE-2023-4424

CVSS score8.3 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2023-11-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Description

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device.

Weakness classification

  • vulnerabilities@zephyrproject.org: CWE-190
  • nvd@nist.gov: CWE-120

Primary references