CVE-2024-0240

Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients

State: Published
Severity: 6.5 Medium
Published: Feb 15, 2024
Updated: Sep 25, 2024
Reserved: Jan 4, 2024

Description

A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Silabs

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
GSDKsilabs.com	before 4.3.0Affected

References

https://github.com/SiliconLabs/gecko_sdk
https://community.silabs.com/069Vm000001AjEfIAK

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.