CVE-2023-5753: Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem
Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hcicore.c
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-5753?
CVE-2023-5753 is a vulnerability in the Bluetooth subsystem of Zephyrproject Zephyr versions up to and including 3.4.0 that could lead to potential buffer overflows due to disabled asserts in /subsys/bluetooth/host/hci_core.c.
How severe is CVE-2023-5753?
CVE-2023-5753 has a severity rating of 8.8 (high).
How can I fix CVE-2023-5753?
To fix CVE-2023-5753, it is recommended to update Zephyrproject Zephyr to a version higher than 3.4.0.
What is the Common Weakness Enumeration (CWE) for CVE-2023-5753?
The CWEs associated with CVE-2023-5753 are CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-120 (Buffer Copy without Checking Size of Input) and CWE-191 (Integer Underflow)
Where can I find more information about CVE-2023-5753?
More information about CVE-2023-5753 can be found at the following reference: [link](https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hmpr-px56-rvww)