Nrf Connect Sdk
Monthly
Buffer overflow in Nordic Semiconductor's nRF Connect SDK Bluetooth CGMS RACP write handler allows an authenticated BLE peer within radio range to overflow a 20-byte static buffer into adjacent BSS memory. Exploitability and exact impact are build-specific: because BSS layout is determined at link time per firmware build, adjacent corrupted data may be security-neutral or may include function pointers or critical control structures enabling code execution or device crash. No public exploit has been identified at time of analysis; the vulnerability was reported through YesWeHack.
Buffer overflow in Nordic Semiconductor's nRF Connect SDK Bluetooth CGMS RACP write handler allows an authenticated BLE peer within radio range to overflow a 20-byte static buffer into adjacent BSS memory. Exploitability and exact impact are build-specific: because BSS layout is determined at link time per firmware build, adjacent corrupted data may be security-neutral or may include function pointers or critical control structures enabling code execution or device crash. No public exploit has been identified at time of analysis; the vulnerability was reported through YesWeHack.