CVE-2024-7137: Denial of Service in Silicon Labs RS9116 Bluetooth SDK
The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a crash. A hard reset is required to recover the crashed device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7137?
CVE-2024-7137 is classified as a high severity vulnerability due to the potential for device crashes.
How do I fix CVE-2024-7137?
To fix CVE-2024-7137, ensure that your L2CAP packets do not exceed the maximum supported packet size defined in the SDK.
What devices are affected by CVE-2024-7137?
CVE-2024-7137 affects devices using the Silicon Labs RS9116 Bluetooth SDK.
What are the consequences of CVE-2024-7137?
The consequence of CVE-2024-7137 is a device crash requiring a hard reset to restore functionality.
Is there a patch available for CVE-2024-7137?
As of now, check with Silicon Labs for any available patches or updates addressing CVE-2024-7137.