CyberRota Analysis
AI-GeneratedThe BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) is vulnerable to a heap-based buffer overflow due to improper validation of packet lengths in the PC bridge protocol decoder. Attackers can exploit this flaw via malicious USB or Bluetooth Low Energy peripherals, potentially leading to denial of service or arbitrary code execution by corrupting heap metadata. Organizations using this SDK, particularly those integrating with external devices, should prioritize patching to mitigate these risks.
Original NVD Description
A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to cause a denial of service (process crash) or potentially execute arbitrary code. The bridge decoder ({{bridge_decoder.c}}) trusts the packet length field provided by the external device and forwards it to the host response queue ({{mqueue_add_data}}) without validating the bounds of the destination buffer. A malicious or compromised USB or Bluetooth Low Energy (BLE) peripheral can advertise a payload size up to ~3 KB, which exceeds the default queue slot size of 255 bytes. This results in an unbounded heap overwrite ({{memcpy}}), corrupting adjacent heap metadata on the host system when processing the device's response.