PT-2022-10413 · Bluecore · Bluecore

Published 2022-01-03 · Updated 2022-01-13 · CVE-2021-35093

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BlueCore (affected versions not specified)

Description The issue is related to possible memory corruption in the BT controller when it receives an oversized LMP packet over a 2-DH1 link, leading to denial of service in BlueCore.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-35093

Affected Products

Bluecore

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-35093 · Security Note
• https://qualcomm.com/company/product-security/bulletins/december-2021-bulletin · Vendor Advisory
• https://t.me/cvenotify/25416 · Telegram Post
• https://t.me/cibsecurity/34835 · Telegram Post