CVE-2023-4264

CriticalCVSS 9.6/10Last modified Jun 17, 2026

Description

Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.

Metrics

CVSS 3.1 9.6/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-121CWE-122

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-426405.5In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional executiCVE-2023-426415.5In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional executiCVE-2023-426425.5In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional executiCVE-2023-426435.5In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional executiCVE-2023-426445.5In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution prCVE-2023-426455.5In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to loCVE-2023-426465.5In Ifaa service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution CVE-2023-426475.5In Ifaa service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to lCVE-2023-426485.5In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution CVE-2023-426495.5In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution CVE-2023-42656.8Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/deCVE-2023-426505.5In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution
CVE-2023-4264: Critical severity, CVSS 9.6 | Vulnix