CVE-2024-0240 - Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients

Back Back to CVE browser

MEDIUM

Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients

Published Feb 15, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.36%

Description

A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.

Affected products

Vendor Silabs.com Product GSDK Default
unaffected
Affected
- ≥ 0, < 4.3.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Silabs.com	GSDK	unaffected	Affected ≥ 0, < 4.3.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-401

References (3)

https://community.silabs.com/069Vm000001AjEfIAK
Permissions Required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16038
Advisory
https://github.com/SiliconLabs/gecko_sdk
Product

Link	Providers	Tags
https://community.silabs.com/069Vm000001AjEfIAK		Permissions Required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16038		Advisory
https://github.com/SiliconLabs/gecko_sdk		Product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Silabs

Published Feb 15, 2024

Updated Sep 25, 2024

Reserved Jan 4, 2024

Link CVE-2024-0240

CISA Vulnrichment

Updated Feb 16, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-0240

Red Hat

No data

ENISA EUVD

Assigner Silabs

Published Feb 15, 2024

Updated Sep 25, 2024

Link EUVD-2024-16038

GitHub

No data