1. Home
  2. CVE Database
  3. CVE-2022-26528
MEDIUM · 6.5

CVE-2022-26528

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adj...

Vulnerability Description

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
RealtekBluetooth Mesh Software Development Kit<= 4.17-4.17-20220127
GoogleAndroid-
LinuxLinux Kernel-

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2022-26528?

CVE-2022-26528 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adj...

How severe is CVE-2022-26528?

CVE-2022-26528 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-26528?

Check the references section above for vendor advisories and patch information. Affected products include: Realtek Bluetooth Mesh Software Development Kit, Google Android, Linux Linux Kernel.