CVE-2024-48986: arm mbed Classic Buffer Overflow

Vulnerability summary

CVE-2024-48986 is a high (CVSS 7.5) Classic Buffer Overflow vulnerability in arm mbed. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 40.3% of scored vulnerabilities.

Timeline

1. 20-11-2024
   PublishedVulnerability first disclosed.
2. 26-11-2024
   Last modifiedVulnerability information updated.

Description

An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from its header. Certain events cause a callback, the logic for which allocates a buffer (the length of which is determined by looking up the event type in a table). The subsequent write operation, however, copies the amount of data specified in the packet header, which may lead to a buffer overflow. This bug is trivial to exploit for a denial of service but is not certain to suffice to bring the system down and can generally not be exploited further because the exploitable buffer is dynamically allocated.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.