CVE-2022-26527mediumCWE-120

CVE-2022-26527: medium-severity vulnerability in Realtek Linux/Android Bluetooth Mesh SDK

Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Published · Updated

Follow this CVE+ Monitor Linux/Android Bluetooth Mesh SDK

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.5%
Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Realtek · Linux/Android Bluetooth Mesh SDK
Related CVEs — Realtek Linux/Android Bluetooth Mesh SDK

In the same product, most dangerous first.

CVE-2022-26529MEDIUMRealtek Linux/Android Bluetooth Mesh SDK - Buffer OverflowEPSS 0.5%CVE-2022-26528MEDIUMRealtek Linux/Android Bluetooth Mesh SDK - Buffer OverflowEPSS 0.5%CVE-2022-25635MEDIUMRealtek Linux/Android Bluetooth Mesh SDK - Buffer OverflowEPSS 0.4%