CVE-2020-10061: Error handling invalid packet sequence
Improper handling of the full-buffer case in the Zephyr Bluetooth implementation can result in memory corruption. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-10061?
CVE-2020-10061 has a medium severity level due to the potential for memory corruption.
How do I fix CVE-2020-10061?
To fix CVE-2020-10061, update to Zephyr version 2.2.1 or later, or version 1.14.1 or later.
Which versions of Zephyr are affected by CVE-2020-10061?
CVE-2020-10061 affects Zephyr versions 2.2.0 and later, and 1.14.0 and later.
What can happen if CVE-2020-10061 is exploited?
Exploiting CVE-2020-10061 may lead to memory corruption, which can cause instability or crashes in applications using the affected Bluetooth implementation.
Is CVE-2020-10061 related to Bluetooth functionality in Zephyr?
Yes, CVE-2020-10061 is specifically related to improper handling of the full-buffer case in the Bluetooth implementation of Zephyr.