CVE-2023-1902

Summary

CVE-2023-1902 is a vulnerability affecting the Bluetooth HCI (Host Controller Interface) host layer logic. Malicious HCI Controllers can exploit this issue by failing to clear a global reference to a state pointer after handling connection events. This results in a dangling reference within the host layer, potentially leading to a denial-of-service (DoS) crash or even remote code execution (RCE) on the host layer.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.