CVE-2019-16336 - The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers (in radio range) to cause a denial of service (crash) via a crafted BLE Link Layer frame

Back Back to CVE browser

MEDIUM

The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers (in radio range) to cause a denial of service (crash) via a crafted BLE Link Layer frame

Published Feb 12, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 1.48%

Description

The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers (in radio range) to cause a denial of service (crash) via a crafted BLE Link Layer frame.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (4)

https://asset-group.github.io/disclosures/sweyntooth/
x_refsource_MISCExploitThird Party Advisory
https://community.cypress.com/thread/48573
x_refsource_MISCVendor Advisory
https://community.cypress.com/thread/53680
x_refsource_MISCVendor Advisory
https://www.youtube.com/watch?v=Iw8sIBLWE_w
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://asset-group.github.io/disclosures/sweyntooth/		x_refsource_MISCExploitThird Party Advisory
https://community.cypress.com/thread/48573		x_refsource_MISCVendor Advisory
https://community.cypress.com/thread/53680		x_refsource_MISCVendor Advisory
https://www.youtube.com/watch?v=Iw8sIBLWE_w		x_refsource_MISCExploitThird Party Advisory