CVE-2019-16336: Medium severity cypress cyble-416045 vulnerability
The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers (in radio range) to cause a denial of service (crash) via a crafted BLE Link Layer frame.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-16336?
CVE-2019-16336 is a vulnerability in the Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier, which allows attackers within radio range to cause a denial of service (crash) by sending a crafted BLE L2CAP packet.
What is the severity of CVE-2019-16336?
The severity of CVE-2019-16336 is medium with a CVSS score of 6.5.
How does CVE-2019-16336 affect Cypress Cyble-416045?
Cypress Cyble-416045 with firmware versions up to and including 2.10 is affected by CVE-2019-16336.
How does CVE-2019-16336 affect Cypress Cybl11573?
Cypress Cybl11573 with firmware versions up to and including 3.61 is affected by CVE-2019-16336.
How do I mitigate the CVE-2019-16336 vulnerability?
To mitigate the CVE-2019-16336 vulnerability, update the Cypress PSoC 4 BLE component firmware to version 3.62 or later.