CVE-2023-3024

Summary

CVE-2023-3024 is a newly identified vulnerability affecting Bluetooth Low Energy (BLE) stacks. By manipulating the 'prepare write response' packets during data transfer, an attacker can force the stack to segment these packets, leading to an out-of-bounds memory access. This issue may result in stack overflows, crashes, or even remote code execution, depending on the specific implementation of the BLE stack. Devices that use this vulnerable stack and support BLE connectivity are potentially at risk. It is recommended that affected organizations apply patches or updates to mitigate this vulnerability and secure their Bluetooth-enabled systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.