CVE-2023-1902 | BDVDB-2026-206613 Detail
zephyrproject-rtosZephyr
Description#
The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS) or potential RCE on the Host layer.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact high. Attack vector: adjacent.
Weaknesses#
- CWE-672 Operation on a Resource after Expiration or Release
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.