CVE-2021-3455

creationtimestamp| type| source ---|---|--- 2021-10-20 02:33:36+00:00| published-proof-of-concept| https://t.me/cibsecurity/30848...

CVE-2021-3455

Disconnecting L2CAP channel right after invalid ATT request leads freeze. Zephyr versions = 2.4.0, = 2.5.0 contain Use After Free CWE-416. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7g38-3x9v-v7vp...

CVE-2021-3455

This CVE affects Zephyr RTOS (2.4.0+ and 2.5.0+). The issue is a resource management error triggered by disconnecting the L2CAP channel immediately after an invalid ATT request, which can cause a freeze. Per NVD, affected versions exhibit a Use-After-Free (CWE-416). Documentation cites the GHSA a...