CVE-2024-7138

Denial of Service in Silicon Labs RS9116 Bluetooth SDK

State
Published
Severity
6.5 Medium
Published
Dec 19, 2024
Updated
May 28, 2025
Reserved
Jul 26, 2024

Read the record on cve.org

Description

An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSilabs

Weaknesses

Affected Products

ProductVersions
RS9116 Bluetooth SDKsilabs.com
  • 2.10.4 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.