CVE-2023-3024: Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access
Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-3024.
What is the title of this vulnerability?
The title of this vulnerability is 'Forcing the Bluetooth LE stack to segment prepare write response packets can lead to an out-of-bound...'
What is the description of this vulnerability?
The description of this vulnerability is 'Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access.
What is the severity rating of CVE-2023-3024?
The severity rating of CVE-2023-3024 is medium with a value of 6.5.
What software is affected by this vulnerability?
The Silabs Gecko Software Development Kit version 1.0.0 to 6.0.0 is affected by this vulnerability.
How can I fix CVE-2023-3024?
There is no known fix for CVE-2023-3024 at the moment. It is recommended to follow any updates or patches provided by the software vendor.
Where can I find more information about CVE-2023-3024?
You can find more information about CVE-2023-3024 in the references provided: [GitHub](https://github.com/SiliconLabs/gecko_sdk), [Silicon Labs](https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ViQvHQAV/?operationContext=S1).