CVE-2024-48983

An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by reading 2 bytes from the packet header. A buffer is then allocated to contain the entire packet, the size of which is calculated as the length of the packet body determined earlier plus the header length. WsfMsgAlloc then increments this again by sizeof(wsfMsg_t). This may cause an integer overflow that results in the buffer being significantly too small to contain the entire packet. This may cause a buffer overflow of up to 65 KB . This bug is trivial to exploit for a denial of service but can generally not be exploited further because the exploitable buffer is dynamically allocated.

• CWE-190
• CWE-190

• https://github.com/mbed-ce/mbed-os/blob/54e8693ef4ff7e025018094f290a1d5cf380941f/connectivity/FEATURE_BLE/libraries/cordio_stack/wsf/sources/port/baremetal/wsf_msg.c#L72Product
• https://github.com/mbed-ce/mbed-os/pull/388Issue Tracking, Vendor Advisory

Published

Nov 20, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-48971The Clinician Password and Serial Number Clinician Password …9.3
• CVE-2024-48973The debug port on the ventilator's serial interface is enabl…9.3
• CVE-2024-48974The ventilator does not perform proper file integrity checks…9.3
• CVE-2024-4898The InstaWP Connect – 1-click WP Staging & Migration plugin …9.8
• CVE-2024-48981An issue was discovered in MBed OS 6.16.0. During processing…7.5
• CVE-2024-48982An issue was discovered in MBed OS 6.16.0. Its hci parsing s…7.5
• CVE-2024-48984An issue was discovered in MBed OS 6.16.0. When parsing hci …9.8
• CVE-2024-48985An issue was discovered in MBed OS 6.16.0. During processing…7.5
• CVE-2024-48986An issue was discovered in MBed OS 6.16.0. Its hci parsing s…7.5
• CVE-2024-48987Snipe-IT before 7.0.10 allows remote code execution (associa…6.6
• CVE-2024-48988SQL Injection vulnerability in Apache StreamPark. This issu…7.6
• CVE-2024-48989A vulnerability in the PROFINET stack implementation of the …7.5