Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by reading 2 bytes from the packet header. A buffer is then allocated to contain the entire packet, the size of which is calculated as the length of the packet body determined earlier plus the header length. WsfMsgAlloc then increments this again by sizeof(wsfMsg_t). This may cause an integer overflow that results in the buffer being significantly too small to contain the entire packet. This may cause a buffer overflow of up to 65 KB . This bug is trivial to exploit for a denial of service but can generally not be exploited further because the exploitable buffer is dynamically allocated.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ARM Mbed OS 安全漏洞
Vulnerability Description
ARM Mbed OS是英国ARM公司的一套专用于物联网的开源嵌入式操作系统。 ARM Mbed OS 6.16.0版本存在安全漏洞，该漏洞源于在处理HCI数据包时，软件通过读取数据包头部的两个字节来动态确定数据包数据的长度，如果计算出的缓冲区大小因整数溢出而显著过小，则可能导致缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A