CVE-2018-16986: Buffer Overflow

Q: What is CVE-2018-16986?

CVE-2018-16986 is a vulnerability in Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices that allows remote attackers to execute arbitrary code via a malformed packet triggering a buffer overflow.

Q: What is the severity of CVE-2018-16986?

CVE-2018-16986 has a severity rating of 8.8 (high).

Q: How does CVE-2018-16986 affect Texas Instruments BLE-STACK?

CVE-2018-16986 affects Texas Instruments BLE-STACK v2.2.1 and earlier versions.

Q: What is the CWE category of CVE-2018-16986?

CVE-2018-16986 falls into the CWE categories 119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and 787 (Out-of-bounds Write).

Q: Is Texas Instruments CC2640 and CC2650 vulnerable to CVE-2018-16986?

No, Texas Instruments CC2640 and CC2650 devices are not vulnerable to CVE-2018-16986.

Published Nov 6, 2018

Updated

Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that triggers a buffer overflow.

Affected Software

7 affected components

ti BLE-STACK<=2.2.1

ti Cc2640

ti Cc2650

ti BLE-STACK=3.0.0

ti Cc2640r2f

ti BLE-STACK<=2.3.3

ti Cc1350

Event History

Nov 6, 2018

CVE Published

03:29 PM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is CVE-2018-16986?

CVE-2018-16986 is a vulnerability in Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices that allows remote attackers to execute arbitrary code via a malformed packet triggering a buffer overflow.

What is the severity of CVE-2018-16986?

CVE-2018-16986 has a severity rating of 8.8 (high).

How does CVE-2018-16986 affect Texas Instruments BLE-STACK?