CVE-2024-0240

MEDIUM

Silicon Labs Gecko SDK < 4.3.0 - Memory Leak in Bluetooth Stack via Notification Handling

Title source: llm

Description

A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.

References (2)

Core 2

Core References

Permissions Required

https://community.silabs.com/069Vm000001AjEfIAK

Product

https://github.com/SiliconLabs/gecko_sdk

Scores

CVSS v3 6.5

EPSS 0.0036

EPSS Percentile 27.7%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-401

Status published

Products (1)

silabs/gecko_software_development_kit < 4.3.0

Published Feb 15, 2024

Tracked Since Feb 18, 2026