Mbed OS vulnerabilities

2 known vulnerabilities in Mbed OS from Arm. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  mbed: Buffer Copy without Checking Size of Input

  CVE-2024-48984Nov 20, 2024Mbed

  An issue was discovered in MBed OS 6.16.0. When parsing hci reports, the hci parsing software dynamically determines the length of a list of reports by reading a byte from an input stream. It then fetches the length of the first report, uses it to calculate th

• 7.0 High severity

  mbed_os: Buffer Copy without Checking Size of Input

  CVE-2024-22905Apr 19, 2024Arm

  Buffer Overflow vulnerability in ARM mbed-os v.6.17.0 allows a remote attacker to execute arbitrary code via a crafted script to the hciTrSerialRxIncoming function.