CVE-2021-3433 MEDIUM

CVE-2021-3433: BT: Invalid channel map in CONNECT_IND results to Deadlock

Vendor Zephyrproject-Rtos

Product zephyr

Weakness CWE-703

Published June 28, 2022

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

4.0/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

Invalid channel map in CONNECT_IND results to Deadlock. Zephyr versions >= v2.5.0 Improper Check or Handling of Exceptional Conditions (CWE-703). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp

Key dates

02Disclosure timeline

June 28, 2022 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-3433 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/703.html

Related vulnerabilities

04Related CVE

CVE-2025-58758 TinyEnv: Missing .env file not required — may cause unexpected behavior CVE-2020-1644 Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets CVE-2021-0241 Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart CVE-2021-0286 Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart CVE-2026-34388 Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint