CVE-2022-24893 Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption
Attackers can trigger memory corruption during Bluetooth Mesh provisioning to gain full system control, requiring firmware upgrades.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-24893?
CVE-2022-24893 is a high-severity memory corruption vulnerability in espressif esp-idf, published on 25 Jun 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerability can be triggered during provisioning, because there is no check for the `SegN` field of the Transaction Start PDU. This can result in memory corruption related attacks and potentially attacker gaining control of the entire system. Patch commits are available on the 4.1, 4.2, 4.3 and 4.4 branches and users are recommended to upgrade. The upgrade is applicable for all applications and users of `ESP-BLE-MESH` component from `ESP-IDF`. As it is implemented in the Bluetooth Mesh stack, there is no workaround for the user to fix the application layer without upgrading the underlying firmware.
Which versions are affected by CVE-2022-24893?
It affects 1 product.
Products include Espressif Esp-Idf.
How do I fix CVE-2022-24893?
No fix has been published for CVE-2022-24893 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-24893 being exploited?
There is no known exploitation of CVE-2022-24893 in the wild and no public exploit code.
Other vulnerabilities in espressif esp-idf
Sources
Also known as GHSA-7f7f-jj2q-28wm.