medium6.5
CVE-2022-25635
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length.
Impact
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realtek | Bluetooth Mesh Software Development Kit | through 4.17-4.17-20220127 |