medium6.5
CVE-2021-34149
The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP_AU_Rand packets, allowing …
Impact
The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP_AU_Rand packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device by flooding it with LMP_AU_Rand packets after the paging procedure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ti | Cc256xcqfn-Em Firmware | All versions |
References
- NVD record
- CVE.org record
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://www.ti.com/product/CC2564C
- https://www.ti.com/tool/CC256XC-BT-SP#primary-sw
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://www.ti.com/product/CC2564C
- https://www.ti.com/tool/CC256XC-BT-SP#primary-sw