CVE-2024-48983

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-48983
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-48983.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-48983
Published
2024-11-20T00:00:00Z
Modified
2026-10-28T03:03:32Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by reading 2 bytes from the packet header. A buffer is then allocated to contain the entire packet, the size of which is calculated as the length of the packet body determined earlier plus the header length. WsfMsgAlloc then increments this again by sizeof(wsfMsg_t). This may cause an integer overflow that results in the buffer being significantly too small to contain the entire packet. This may cause a buffer overflow of up to 65 KB . This bug is trivial to exploit for a denial of service but can generally not be exploited further because the exploitable buffer is dynamically allocated.

Database specific 
{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/48xxx/CVE-2024-48983.json"
}
References

Affected packages

Git / github.com/mbed-ce/mbed-os

Affected ranges

Type
GIT
Repo
https://github.com/mbed-ce/mbed-os
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
1a47a218a486bffe0c8a9e1a29a15eef223611f5
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "65"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}

Affected versions

Other
mbed_lib_rev65

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-48983.json"