Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-8798


No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c.


Published

2024-12-16T00:15:05.913

Last Modified

2025-09-17T06:15:41.960

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-122
    CWE-787
  • Type: Primary
    CWE-787

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System zephyrproject zephyr ≤ 3.7.0 Yes

References