1379 matches found
CVE-2024-48981
An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet header by looking up the identifying first byte and matching it against a table of possible lengths. The initial parsing function, hciTrSerialRxIncoming does n...
PT-2024-33312 · Arm · Mbed Os
Name of the Vulnerable Software and Affected Versions: MBed OS version 6.16.0 Description: An issue was discovered in the processing of HCI packets, where the software dynamically determines the packet data length by reading 2 bytes from the packet header. A buffer is allocated based on this...
PT-2024-33313 · Arm · Mbed Os
Name of the Vulnerable Software and Affected Versions: MBed OS version 6.16.0 Description: An issue was discovered in the parsing of hci reports. The hci parsing software dynamically determines the length of a list of reports by reading a byte from an input stream. It then fetches the length of t...
ARM Mbed OS 安全漏洞
ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from the British company ARM. A security vulnerability exists in ARM Mbed OS version 6.16.0, which stems from the HCI parsing software allocating buffers based on the length specified in the...
ARM Mbed OS 安全漏洞
ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from the British company ARM. A security vulnerability exists in ARM Mbed OS version 6.16.0, which stems from a buffer overflow caused by its HCI parsing software when reading a byte from the...
PT-2024-33314 · Arm · Mbed Os
Name of the Vulnerable Software and Affected Versions: MBed OS version 6.16.0 Description: An issue was discovered in the processing of HCI packets. The software dynamically determines the length of the packet data by reading 2 bytes from the packet data. A buffer is then allocated to contain the...
CVE-2024-48985
An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by reading 2 bytes from the packet data. A buffer is then allocated to contain the entire packet, the size of which is calculated as the length of the...
CVE-2024-48984
An issue was discovered in MBed OS 6.16.0. When parsing hci reports, the hci parsing software dynamically determines the length of a list of reports by reading a byte from an input stream. It then fetches the length of the first report, uses it to calculate the beginning of the second report, etc...
CVE-2024-48983
An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by reading 2 bytes from the packet header. A buffer is then allocated to contain the entire packet, the size of which is calculated as the length of the...
CVE-2024-48982
MBed OS 6.16.0 contains a vulnerability in the HCI packet length parsing. The hci parsing software reads a length byte from the packet header and assumes it is >= 3, but does not enforce this. If length
PT-2024-33311 · Arm · Mbed Os
Name of the Vulnerable Software and Affected Versions: MBed OS version 6.16.0 Description: An issue was discovered in the hci parsing software of MBed OS, where it dynamically determines the length of certain hci packets by reading a byte from its header. The software assumes this value to be...
CVE-2024-48985
MBed OS 6.16.0 is affected by a buffer overflow in HCI packet processing. When reading the packet length from the first two bytes, the code allocates a buffer sized to the packet body plus header; if allocation fails due to an oversized packet, there is no proper error handling and hciTrSerialRxI...
PT-2024-33315 · Arm · Mbed Os
Name of the Vulnerable Software and Affected Versions: Mbed OS version 6.16.0 Description: An issue was discovered in the hci parsing software of Mbed OS, where it dynamically determines the length of certain hci packets by reading a byte from its header. This can lead to a buffer overflow when t...
CVE-2024-48984
CVE-2024-48984 affects MBed OS 6.16.0. The issue lies in HCI report parsing: the code dynamically determines the length of a reports list from an input byte and uses that to locate subsequent reports. It does not verify that these addresses stay within the target buffer passed to hciEvtProcessLeE...
CVE-2024-48982
An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from its header. This value is assumed to be greater than or equal to 3, but the software doesn't ensure that this is the case. Supplying a length less th...
ARM Mbed OS 安全漏洞
ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things from ARM UK. A security vulnerability exists in ARM Mbed OS version 6.16.0, which originates from a buffer overflow triggered by a function that will continue to write to a temporary header buffer...
ARM Mbed OS 安全漏洞
ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things from ARM UK. A security vulnerability exists in ARM Mbed OS version 6.16.0, which originates when parsing an HCI report, where the software does not verify that the report address is located in th...
CVE-2024-48986
CVE-2024-48986 affects MBed OS 6.16.0: the HCI parsing code determines packet lengths by reading a header byte, allocates a buffer based on event type, and then copies header-specified data into that buffer, potentially causing a buffer overflow. The impact is described as trivial for denial of s...
