go to Content
:::

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center

:::
Date:
Font-stze:

Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

TVN ID TVN-202205001
CVE ID CVE-2022-25635
CVSS 6.5 (Medium)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products Realtek Linux/Android Bluetooth Mesh SDK older than v4.17-4.17-20220127
Description Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.
Solution Realtek Linux/Android Bluetooth Mesh SDK v4.18-4.18-20220218
Credit Realtek
Public Date 2022-08-30
Top