CVE-2024-48982: arm mbed Classic Buffer Overflow

Vulnerability summary

CVE-2024-48982 is a high (CVSS 7.5) Classic Buffer Overflow vulnerability in arm mbed. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 40.2% of scored vulnerabilities.

Timeline

1. 20-11-2024
   PublishedVulnerability first disclosed.
2. 25-11-2024
   Last modifiedVulnerability information updated.

Description

An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from its header. This value is assumed to be greater than or equal to 3, but the software doesn't ensure that this is the case. Supplying a length less than 3 leads to a buffer overflow in a buffer that is allocated later. It is simultaneously possible to cause another integer overflow by supplying large length values because the provided length value is increased by a few bytes to account for additional information that is supposed to be stored there. This bug is trivial to exploit for a denial of service but is not certain to suffice to bring the system down and can generally not be exploited further because the exploitable buffer is dynamically allocated.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.