The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a packet with a Link Layer ID (LLID) equal to zero. This allows attackers within radio range to cause deadlocks, cause anomalous behavior in the BLE state machine, or trigger a buffer overflow via a crafted BLE Link Layer frame.
References
| Link | Resource |
|---|---|
| https://asset-group.github.io/disclosures/sweyntooth/ | Third Party Advisory |
| https://community.cypress.com/thread/53680 | Vendor Advisory |
| https://www.cypress.com/products/ble-bluetooth | Vendor Advisory |
| https://asset-group.github.io/disclosures/sweyntooth/ | Third Party Advisory |
| https://community.cypress.com/thread/53680 | Vendor Advisory |
| https://www.cypress.com/products/ble-bluetooth | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 04:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://asset-group.github.io/disclosures/sweyntooth/ - Third Party Advisory | |
| References | () https://community.cypress.com/thread/53680 - Vendor Advisory | |
| References | () https://www.cypress.com/products/ble-bluetooth - Vendor Advisory |
Information
Published : 2020-02-10 21:51
Updated : 2024-11-21 04:31
NVD link : CVE-2019-17061
Mitre link : CVE-2019-17061
CVE.ORG link : CVE-2019-17061
JSON object : View
Products Affected
cypress
- psoc_4_ble
- psoc_4
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')