CVE-2023-2234 MEDIUM

CVE-2023-2234: BT HCI host union variant confusion

Vendor Zephyrproject-Rtos
Product Zephyr
Weakness CWE-843
Published July 10, 2023
Last update November 7, 2024
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host.

Key dates

02Disclosure timeline

July 10, 2023 CVE published
November 7, 2024 Record updated