Bluetooth Mesh 缓冲区错误漏洞

Bluetooth Mesh is an application. A Bluetooth profile. A security vulnerability exists in Cypress Bluetooth Mesh SDK version BSA010705.01.00-BX8-AMESH-08, which stems from the presence of a buffer overflow. An attacker exploiting this vulnerability could remotely execute arbitrary code...

CVE-2022-31363

CVE-2022-31363 affects Cypress Bluetooth Mesh SDK version BSA0107_05.01.00-BX8-AMESH-08. The vulnerability is a buffer overflow caused by an out-of-bounds write during mesh provisioning, due to no check for mismatched SegN and TotalLength in the Transaction Start PDU. The affected component is th...