CVE-2026-97402
In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the AD-structure length field of an over-the-air BLE ad…
Impact
In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the AD-structure length field of an over-the-air BLE advertising payload. Any unauthenticated attacker within BLE radio range can broadcast a two-byte advertising payload that drives the Kura beacon-scanner thread into a tight infinite loop, pinning a CPU core and permanently halting beacon ingestion until the gateway is restarted. To trigger the attack, the iBeacon/Eddystone scanner component should be installed and active. By default the components are not installed or enabled.
An attacker can exploit this from the same local network, without logging in, without any action by a user. Specific conditions have to be met, which makes an attack harder. If it succeeds: low risk of outages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eclipse Foundation | Eclipse Kura | from 3.1.0 through 5.6.2 |
| The Eclipse Foundation | Eclipse Kura | Version 3.1.0 ≤5.6.2 |