CVE-2024-0240: Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients
First published: Thu Feb 15 2024(Updated: )
A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.
Credit: product-security@silabs.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Silicon Labs Gecko SDK | <4.3.0 | |
| Silicon Labs EFR32 Bluetooth stack |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-0240?
CVE-2024-0240 has a severity rating that indicates a potential impact on system stability due to a memory leak.
How do I fix CVE-2024-0240?
To fix CVE-2024-0240, update to the latest version of the Silicon Labs Gecko SDK beyond 4.3.0.
What products are affected by CVE-2024-0240?
CVE-2024-0240 affects the Silicon Labs EFR32 Bluetooth stack and all related Gecko SDK products up to version 4.3.0.
What happens if CVE-2024-0240 is exploited?
Exploiting CVE-2024-0240 may cause memory exhaustion preventing Bluetooth operations like advertising and scanning from functioning.
Is CVE-2024-0240 a remote vulnerability?
CVE-2024-0240 is not categorized as a remote vulnerability, but it affects Bluetooth operations within local environments.
- agent/title
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/severity
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup-request
- agent/event
- vendor/silabs
- canonical/silicon labs gecko sdk
- vendor/silicon labs
- canonical/silicon labs efr32 bluetooth stack