8.8
CVSSv3

CVE-2018-16986

Published: 06/11/2018 Updated: 24/08/2020
CVSS v2 Base Score: 5.8 | Impact Score: 6.4 | Exploitability Score: 6.5
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 517
Vector: AV:A/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote malicious users to execute arbitrary code via a malformed packet that triggers a buffer overflow.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ti ble-stack

ti ble-stack 3.0.0

Vendor Advisories

On November 1st, 2018, Armis announced the presence of a Remote Code Execution (RCE) or Denial of Service (DoS) vulnerability in the Bluetooth Low Energy (BLE) Stack on Texas Instruments (TI) chips CC2640 and CC2650 This vulnerability has been assigned the Common Vulnerabilities and Exposures (CVE) ID of CVE-2018-16986 The vulnerability is due t ...