Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from its header. Certain events cause a callback, the logic for which allocates a buffer (the length of which is determined by looking up the event type in a table). The subsequent write operation, however, copies the amount of data specified in the packet header, which may lead to a buffer overflow. This bug is trivial to exploit for a denial of service but is not certain to suffice to bring the system down and can generally not be exploited further because the exploitable buffer is dynamically allocated.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ARM Mbed OS 安全漏洞
Vulnerability Description
ARM Mbed OS是英国ARM公司的一套专用于物联网的开源嵌入式操作系统。 ARM Mbed OS 6.16.0版本存在安全漏洞，该漏洞源于HCI解析软件在处理某些事件时，根据数据包头部指定的长度分配缓冲区，但后续写操作可能复制过多数据，导致缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A