CyberRota Analysis
AI-GeneratedA buffer overflow vulnerability exists in the Bluetooth Continuous Glucose Monitoring Service's Record Access Control Point write handler, allowing authenticated BLE peers to overwrite adjacent memory. The potential impact is unpredictable and varies based on the firmware's BSS layout, which could lead to arbitrary code execution or system instability. Manufacturers of affected Bluetooth-enabled medical devices should prioritize addressing this vulnerability to mitigate risks to patient safety and data integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory. The exploitable impact cannot be predetermined - it is entirely dependent on the linker-assigned BSS layout of the specific firmware build, which may vary.