CVE-2021-28136: Medium severity espressif esp-idf vulnerability
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets during the pairing process, allowing attackers in radio range to trigger memory corruption (and consequently a crash) in ESP32 via a replayed (duplicated) LMP packet.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-28136?
CVE-2021-28136 is a vulnerability in the Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier that allows attackers in radio range to trigger memory corruption and cause a crash in ESP32 devices.
What is the severity of CVE-2021-28136?
The severity of CVE-2021-28136 is medium with a CVSS score of 6.5.
How does CVE-2021-28136 affect Espressif ESP-IDF?
CVE-2021-28136 affects Espressif ESP-IDF versions up to and including 4.4.
How can attackers exploit CVE-2021-28136?
Attackers in radio range can exploit CVE-2021-28136 by replaying multiple LMP IO Capability Request packets during the pairing process, causing memory corruption on ESP32 devices.
Is the Espressif ESP32 affected by CVE-2021-28136?
No, the Espressif ESP32 is not vulnerable to CVE-2021-28136.