CVE-2023-41093: Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse
Use After Free vulnerability in Silicon Labs Bluetooth SDK on 32 bit, ARM may allow an attacker with precise timing capabilities to intercept a small number of packets intended for a recipient that has left the network.This issue affects Silabs Bluetooth SDK: through 8.0.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-41093?
CVE-2023-41093 is classified as a high severity vulnerability due to its potential for packet interception.
How do I fix CVE-2023-41093?
To mitigate CVE-2023-41093, upgrade the Silicon Labs Bluetooth SDK to version 8.0.1 or later.
What types of devices are affected by CVE-2023-41093?
CVE-2023-41093 affects devices using the Silicon Labs Bluetooth Low Energy Software Development Kit up to version 8.0.0.
What is a use after free vulnerability in CVE-2023-41093?
The use after free vulnerability in CVE-2023-41093 allows attackers to exploit memory that has been freed, potentially leading to unauthorized access of data.
Can CVE-2023-41093 be exploited remotely?
CVE-2023-41093 requires an attacker to have precise timing capabilities, making remote exploitation challenging but possible in certain scenarios.