CVE-2024-8798

CVSS V2 None CVSS V3 None
Description
No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c.
Overview
  • CVE ID
  • CVE-2024-8798
  • Assigner
  • zephyr
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-12-15T23:23:31.173Z
  • Last Modified Date
  • 2024-12-15T23:23:31.173Z
Weakness Enumerations
CWE URL
CWE-122 http://cwe.mitre.org/data/definitions/122.html
CWE-20 http://cwe.mitre.org/data/definitions/20.html
References
Reference URL Reference Tags
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-r7pm-f93f-f7fp
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-8798
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8798
History
Created Old Value New Value Data Type Notes
2024-12-16 13:05:13 Added to TrackCVE