First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-3024

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787 CWE-119

Affected software

Vendor	Product	Versions
silabs.com	GSDK	>= 1.0.0, < 6.0.0

References

https://github.com/SiliconLabs/gecko_sdkProduct
https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ViQvHQAV/?operationContext=S1Permissions Required, Vendor Advisory
https://github.com/SiliconLabs/gecko_sdkProduct
https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000ViQvHQAV/?operationContext=S1Permissions Required, Vendor Advisory

Timeline

Published: Sep 29, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-302429.8NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.CVE-2023-302437.5Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive informat CVE-2023-302459.8SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the crit_id para CVE-2023-302469.8SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the contestant_i CVE-2023-302479.8File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code CVE-2023-30257.2The Dropbox Folder Share plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.9.7 via the 'CVE-2023-302538.8Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in inject CVE-2023-302566.1Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and CVE-2023-302577.8A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root.CVE-2023-302589.8Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenti CVE-2023-302595.5A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information via a crafted DBF fil CVE-2023-30266.1Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.