High
bt: hci: DoS and possible RCE
Type: advisorySources: OSV
An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2023-4424
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 8 Nov 2026, 03:15 UTC · Revision 1
Source evidence
An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device.
osv:CVE-2023-4424
Complete source record
{
"id": "6a57dc39dcac6298df3ab1f55bcee3c27cc57d6234d4bd7d18767d6159e9dd4f",
"url": "https://osv.dev/vulnerability/CVE-2023-4424",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "bt: hci: DoS and possible RCE",
"summary": "An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device.",
"evidence": "osv:CVE-2023-4424",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2023-4424",
"aliases": [
"CVE-2023-4424",
"GHSA-j4qm-xgpf-qjw3"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/zephyrproject-rtos/zephyr",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "a6eef0ba3755f2530c5ce93524e5ac4f5be30194"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "*"
},
{
"fixed": "3.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
}
]
}
}
],
"versions": [
"v3.5.0-rc3",
"v3.5.0-rc2",
"v3.5.0-rc1",
"zephyr-v3.4.0",
"v3.4.0",
"v3.4.0-rc3",
"v3.4.0-rc2",
"v3.4.0-rc1",
"zephyr-v3.3.0",
"v3.3.0",
"v3.3.0-rc3",
"v3.3.0-rc2",
"v3.3.0-rc1",
"zephyr-v3.2.0",
"v3.2.0",
"v3.2.0-rc3",
"v3.2.0-rc2",
"v3.2.0-rc1",
"zephyr-v3.1.0",
"v3.1.0",
"v3.1.0-rc3",
"v3.1.0-rc2",
"v3.1.0-rc1",
"zephyr-v3.0.0",
"v3.0.0",
"v3.0.0-rc3",
"v3.0.0-rc2",
"v3.0.0-rc1",
"v2.7.99",
"v2.7.0-rc3",
"v2.7.0-rc2",
"v2.7.0-rc1",
"zephyr-v2.6.0",
"v2.6.0",
"v2.6.0-rc3",
"v2.6.0-rc2",
"v2.6.0-rc1",
"zephyr-v2.5.0",
"v2.5.0",
"v2.5.0-rc4",
"v2.5.0-rc3",
"v2.5.0-rc2",
"v2.5.0-rc1",
"zephyr-v2.4.0",
"v2.4.0",
"v2.4.0-rc3",
"v2.4.0-rc2",
"v2.4.0-rc1",
"zephyr-v2.3.0",
"v2.3.0",
"v2.3.0-rc2",
"v2.3.0-rc1",
"zephyr-v2.1.0",
"v2.1.0",
"zephyr-v2.2.0",
"v2.2.0",
"v2.2.0-rc3",
"v2.2.0-rc2",
"v2.2.0-rc1",
"v2.1.0-rc3",
"v2.1.0-rc2",
"v2.1.0-rc1",
"zephyr-v2.0.0",
"v2.0.0",
"v2.0.0-rc3",
"v2.0.0-rc2",
"v2.0.0-rc1",
"zephyr-v1.14.0",
"v1.14.0",
"v1.14.0-rc3",
"v1.14.0-rc2",
"v1.14.0-rc1",
"zephyr-v1.13.0",
"v1.13.0",
"v1.13.0-rc3",
"v1.13.0-rc2",
"v1.13.0-rc1",
"zephyr-v1.12.0",
"v1.12.0",
"v1.12.0-rc3",
"v1.12.0-rc2",
"v1.12.0-rc1",
"zephyr-v1.11.0",
"v1.11.0",
"v1.11.0-rc3",
"v1.11.0-rc2",
"v1.11.0-rc1",
"zephyr-v1.10.0",
"v1.10.0",
"v1.10.0-rc3",
"v1.10.0-rc2",
"v1.10.0-rc1",
"zephyr-v1.9.0",
"v1.9.0",
"v1.9.0-rc4",
"v1.9.0-rc3",
"v1.9.0-rc2",
"v1.9.0-rc1",
"v1.8.99",
"zephyr-v1.5.0",
"v1.5.0",
"v1.7.99",
"v1.6.99",
"v1.5.0-rc4",
"v1.5.0-rc3",
"v1.5.0-rc2",
"v1.5.0-rc1",
"v1.5.0-rc0",
"zephyr-v1.4.0",
"v1.4.0",
"v1.4.0-rc3",
"v1.4.0-rc2",
"v1.4.0-rc1",
"zephyr-v1.3.0",
"v1.3.0",
"v1.3.0-rc2",
"v1.3.0-rc1",
"zephyr-v1.2.0",
"v1.2.0",
"v1.2.0-rc2",
"v1.2.0-rc1",
"zephyr-v1.1.0",
"v1.1.0",
"v1.1.0-rc1",
"zephyr-v1.0.0",
"v1.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4424.json"
}
}
],
"modified": "2026-10-28T02:30:53.494890448Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4424.json",
"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j4qm-xgpf-qjw3",
"https://nvd.nist.gov/vuln/detail/CVE-2023-4424",
"https://github.com/zephyrproject-rtos/zephyr"
],
"provider_metadata": {
"cwe_ids": [
"CWE-190"
],
"cna_assigner": "zephyr",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4424.json"
}
},
"related_cves": [
{
"value": "CVE-2023-4424",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 522122,
"published_at": "2023-11-21T06:42:45.491+00:00"
}