Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueCore
References
Link | Resource |
---|---|
https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin | Vendor Advisory |
Information
Published : 2022-01-03 00:15
Updated : 2022-01-13 09:35
NVD link : CVE-2021-35093
Mitre link : CVE-2021-35093
JSON object : View
CWE
CWE-787
Out-of-bounds Write
Products Affected
qualcomm
- csr8510_a10_firmware
- csr8811_a12_firmware
- csr8510_a10
- csr8811_a12