CVE-2024-0240

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-0240

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0240.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-0240

Published

2024-02-15T20:30:45.263Z

Modified

2026-07-15T01:49:01.390957489Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Silicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients

Details

A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.

Database specific

{
    "cna_assigner": "Silabs",
    "cwe_ids": [
        "CWE-401"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0240.json"
}

References

Affected packages

Git / github.com/siliconlabs/gecko_sdk

Affected ranges

Type

GIT

Repo

https://github.com/siliconlabs/gecko_sdk

Events

Introduced

Fixed

551fb8d0f659a56dcb0abde93cef7b8464bf0ac6

Database specific

{
    "cpe": "cpe:2.3:a:silabs:gecko_software_development_kit:*:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.3.0"
        }
    ]
}

Affected versions

v4.*

v4.2.0

v4.2.1

v4.2.2

v4.2.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0240.json"