CVE-2024-1638

The documentation specifies that the BTGATTPERMREADLESC and BTGATTPERMWRITELESC defines for a Bluetooth characteristic: Attribute read/write permission with LE Secure Connection encryption. If set, requires that LE Secure Connections is used for read/write access, however this is only true when i...

CVE-2024-1638

CVE-2024-1638 concerns Bluetooth LE GATT permission checks in Zephyr and related disclosures. The issue is that the BT_GATT_PERM_READ_LESC and BT_GATT_PERM_WRITE_LESC flags are intended to require LE Secure Connections for read/write access, but only when used with additional permissions (BT_GATT...