CVE-2022-25635mediumCWE-120

CVE-2022-25635: medium-severity vulnerability in Realtek Linux/Android Bluetooth Mesh SDK

Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Published · Updated

Follow this CVE+ Monitor Linux/Android Bluetooth Mesh SDK

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Realtek · Linux/Android Bluetooth Mesh SDK
Related CVEs — Realtek Linux/Android Bluetooth Mesh SDK

In the same product, most dangerous first.

CVE-2022-26529MEDIUMRealtek Linux/Android Bluetooth Mesh SDK - Buffer OverflowEPSS 0.5%CVE-2022-26528MEDIUMRealtek Linux/Android Bluetooth Mesh SDK - Buffer OverflowEPSS 0.5%CVE-2022-26527MEDIUMRealtek Linux/Android Bluetooth Mesh SDK - Buffer OverflowEPSS 0.5%