cve/2019/CVE-2019-17518.md

CVE-2019-17518

Description

The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 1.0.14.1081 for DA1468x devices responds to link layer packets with a payload length larger than expected, allowing attackers in radio range to cause a buffer overflow via a crafted packet. This affects, for example, August Smart Lock.

POC

Reference

• https://www.dialog-semiconductor.com/ja/products/connectivity/bluetooth-low-energy/smartbond-da14680-and-da14681

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/JeffroMF/awesome-bluetooth-security321
• https://github.com/Matheus-Garbelini/sweyntooth_bluetooth_low_energy_attacks
• https://github.com/asset-group/vakt-ble-defender
• https://github.com/davelaber/sweyntooth_bluetooth_low_energy_attacks
• https://github.com/engn33r/awesome-bluetooth-security