ORSHIN Attack Defense Framework

Information disclosure due to out-of-bounds heap read

Description

Information disclosure due to out-of-bounds heap read

Risk Assesment: 6.5

CWE

200

CVE

1000250

Attack Surfaces

Controller Implementation (MITRE EMB3D PID-11)

Kernel or Operating System (MITRE EMB3D PID-23)

Kernel or Operating System (MITRE EMB3D PID-23)

BlueZ

Attack Vectors

RID (MITRE EMB3D TID-327)

Defenses

Harden heap, Validate state before reading from heap