CVE-2024-7137

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-7137

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7137.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-7137

Published

2024-12-19T19:23:01.933Z

Modified

2026-07-15T01:49:22.658208761Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Denial of Service in Silicon Labs RS9116 Bluetooth SDK

Details

The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a crash. A hard reset is required to recover the crashed device.

Database specific

{
    "cwe_ids": [
        "CWE-787"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7137.json",
    "cna_assigner": "Silabs"
}

References

Affected packages

Git / github.com/siliconlabs/wiseconnect-wifi-bt-sdk

Affected ranges

Type

GIT

Repo

https://github.com/siliconlabs/wiseconnect-wifi-bt-sdk

Events

Introduced

Last affected

efa842b5ab695298a87407c6c2271e1c99af71e7

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.10.4"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

2.*

2.10.0

2.10.1

2.10.2

2.10.3

2.10.4

2.4.0

2.4.1

2.4.1-ED0

2.4.1-ED1

2.5.0

2.5.1

2.5.2

2.6.0

2.6.1

2.7.0

2.7.1

2.7.3

2.8.0

2.8.1

2.8.2

2.9.0

2.9.1

2.9.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7137.json"