CVE-2022-1041: Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning
First published: Tue Jul 26 2022(Updated: )
In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.
Credit: vulnerabilities@zephyrproject.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zephyrproject Zephyr | <=3.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-1041.
What is the title of the vulnerability?
The title of the vulnerability is 'In Zephyr bluetooth mesh core stack an out-of-bound write vulnerability can be triggered during provisioning.'
What is the severity of the vulnerability?
The severity of the vulnerability is high with a CVSS score of 8.8.
What software is affected by the vulnerability?
The Zephyr bluetooth mesh core stack version up to 3.0.0 is affected by the vulnerability.
How can the vulnerability be triggered?
The vulnerability can be triggered during provisioning in the Zephyr bluetooth mesh core stack.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/title
- agent/author
- agent/remedy
- agent/references
- agent/first-publish-date
- agent/event
- agent/tags
- agent/description
- vendor/zephyrproject
- canonical/zephyrproject zephyr
- version/zephyrproject zephyr/3.0.0