CVE-2020-13594

2020-08-3115:15:10

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.6%

JSON

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map field of the connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.

CPENameOperatorVersion
esp-idfeq4.1-de
esp-idfeq3.2-de
esp-idfeq1.0
esp-idfeq3.3-beta1
esp-idfeq0.9
esp-idfeq3.0-de
esp-idfeq3.1-de
esp-idfeq3.3-beta2
esp-idfeq3.3-de
esp-idfeq4.2-de

Name	Operator	Version
esp-idf	eq	4.1-de
esp-idf	eq	3.2-de
esp-idf	eq	1.0
esp-idf	eq	3.3-beta1
esp-idf	eq	0.9
esp-idf	eq	3.0-de
esp-idf	eq	3.1-de
esp-idf	eq	3.3-beta2
esp-idf	eq	3.3-de
esp-idf	eq	4.2-de