PT-2024-33315 · Arm · Mbed Os

Diff-Fusion · Published 2024-11-20 · Updated 2024-11-26 · CVE-2024-48986

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Mbed OS version 6.16.0

Description An issue was discovered in the hci parsing software of Mbed OS, where it dynamically determines the length of certain hci packets by reading a byte from its header. This can lead to a buffer overflow when the subsequent write operation copies the amount of data specified in the packet header, which may exceed the allocated buffer length. The bug can be exploited for a denial of service, but it is not certain to suffice to bring the system down and can generally not be exploited further because the exploitable buffer is dynamically allocated.

Recommendations For Mbed OS version 6.16.0, as a temporary workaround, consider restricting the use of the hci parsing software until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-48986

Affected Products

Mbed Os

References · 7

• https://github.com/mbed-ce/mbed-os/pull/385 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-48986 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48986 · Security Note
• https://github.com/mbed-ce/mbed-os/blob/54e8693ef4ff7e025018094f290a1d5cf380941f/connectivity/FEATURE_BLE/libraries/cordio_stack/ble-host/sources/hci/dual_chip/hci_evt.c#L3018 · Note
• https://t.me/cvedetector/11664 · Telegram Post
• https://twitter.com/UndercodeNews/status/1860092457922499008 · Twitter Post
• https://twitter.com/CVEnew/status/1859451985612644673 · Twitter Post