CVE-2023-1901

Summary

CVE-2023-1901 is a vulnerability affecting the Bluetooth HCI host layer. The issue stems from a failure to clear a global semaphore reference after synchronously sending HCI commands. This oversight allows a malicious HCI Controller to exploit the dangling reference, potentially causing a denial-of-service (DoS) or even achieving remote code execution (RCE) within the host layer.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.