PT-2020-9816

Name of the Vulnerable Software and Affected Versions Cypress PSoC 4 BLE component versions 3.61 and earlier Description The issue concerns the Bluetooth Low Energy implementation, which improperly handles data channel frames with a payload length larger than the configured link layer maximum RX...

CVE-2019-16336: Buffer Copy without Checking Size of Input

The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers in radio range to cause a denial of service crash via a crafted BLE Li...

CVE-2019-17060

The CVE-2019-17060 entry affects the NXP KW41Z BLE stack (MCUXpresso SDK Bluetooth Low Energy Driver 2.2.1 and earlier). The vulnerability arises because the Link Layer header is not properly restricted when LLID = 0, causing the device to execute certain memory contents upon frame reception. Con...