CVE-2022-31364: infineon cypress_bluetooth_mesh_software_development_kit Out-of-bounds Write
Vulnerability summary
CVE-2022-31364 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in infineon cypress_bluetooth_mesh_software_development_kit. EPSS estimates a 0.78% chance of exploitation in the next 30 days, higher than 55.2% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 01-02-2023PublishedVulnerability first disclosed.
- 27-03-2025Last modifiedVulnerability information updated.
Description
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is lower_transport_layer_on_seg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered by sending a series of segmented packets with inconsistent SegN.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA8.2HighCVSS:3.1/AC:L/AV:A/A:L/C:H/I:L/PR:L/S:C/UI:NDiffers
EPSS trend
Probability
0.78%
Chance of exploitation in the next 30 days
Percentile
55%
Versus all other CVEs
30-day change
0.00 pp
From 0.78% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (docs.google.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Infineon1 product
- cypress_bluetooth_mesh_software_development_kitbsa0107_05.01.00-bx8-amesh-08
1 vendor · 1 product