Description
The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a packet with a Link Layer ID (LLID) equal to zero. This allows attackers within radio range to cause deadlocks, cause anomalous behavior in the BLE state machine, or trigger a buffer overflow via a crafted BLE Link Layer frame.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_misc
https://www.cypress.com/products/ble-bluetooth
Third Party Advisory x_refsource_misc
https://asset-group.github.io/disclosures/sweyntooth/
Vendor Advisory x_refsource_misc
https://community.cypress.com/thread/53680
Scores
CVSS v3
6.5
EPSS
0.0030
EPSS Percentile
53.0%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-120
Status
published
Products (1)
cypress/psoc_4_ble
< 3.62
Published
Feb 10, 2020
Tracked Since
Feb 18, 2026