The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a crash. A hard reset is required to recover the crashed device.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://community.silabs.com/068Vm00000I5mjD | vendor advisory permissions required |