CVE-2022-31363: Buffer Overflow
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is pb_transport_handle_frag_. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered during mesh provisioning. Because there is no check for mismatched SegN and TotalLength in Transaction Start PDU.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-31363?
CVE-2022-31363 is classified as a critical vulnerability due to its potential to allow execution of arbitrary code remotely.
How do I fix CVE-2022-31363?
To fix CVE-2022-31363, update to the latest version of the Infineon Cypress Bluetooth Mesh SDK that addresses this buffer overflow issue.
What components are affected by CVE-2022-31363?
CVE-2022-31363 affects the Cypress Bluetooth Mesh SDK, specifically the function pb_transport_handle_frag_.
What impact does CVE-2022-31363 have?
The impact of CVE-2022-31363 is the potential for an attacker to execute arbitrary code remotely.
What versions of the software are impacted by CVE-2022-31363?
CVE-2022-31363 impacts version bsa0107_05.01.00-bx8-amesh-08 of the Infineon Cypress Bluetooth Mesh SDK.