CVE-2024-7139: Denial of Service in Silicon Labs RS9116 Bluetooth SDK
Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow triggers an assert, which results in a temporary denial of service.
If a watchdog timer is not enabled, a hard reset is required to recover the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7139?
CVE-2024-7139 is classified as a denial of service vulnerability due to the potential for a buffer overflow.
How do I fix CVE-2024-7139?
To mitigate CVE-2024-7139, ensure that your device's watchdog timer is enabled to avoid the need for a hard reset.
What devices are affected by CVE-2024-7139?
The vulnerability CVE-2024-7139 affects devices utilizing the Silicon Labs RS9116 Bluetooth SDK.
What type of attack does CVE-2024-7139 enable?
CVE-2024-7139 enables an attacker to send crafted L2CAP packets, leading to a buffer overflow and temporary denial of service.
Can CVE-2024-7139 cause permanent damage to devices?
CVE-2024-7139 does not cause permanent damage but requires a hard reset if the watchdog timer is not enabled.