PT-2020-9912 · Nxp · Nxp Sdk For Kw41Z

Published 2020-02-12 · Updated 2022-11-02 · CVE-2019-17519

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NXP SDK for KW41Z devices versions through 2.2.1

Description The Bluetooth Low Energy implementation does not properly restrict the Link Layer payload length, allowing attackers in radio range to cause a buffer overflow via a crafted packet.

Recommendations For versions through 2.2.1, consider restricting access to the Bluetooth Low Energy functionality until a patch is available to properly restrict the Link Layer payload length and prevent buffer overflow attacks.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-17519

Affected Products

Nxp Sdk For Kw41Z

References · 5

• 🔥 https://asset-group.github.io/disclosures/sweyntooth · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-17519 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17519 · Vendor Advisory
• https://t.me/cvenotify/5248 · Telegram Post
• https://t.me/cvenotify/946 · Telegram Post