CVE-2019-17517

MEDIUM 5.7CVE-2019-17517 · Published 10/02/2020 · updated 17/06/2026

In short

CVE-2019-17517 is a MEDIUM (CVSS 5.7) vulnerability affecting software development kit (dialog-semiconductor).
Chance of exploitation in the next 30 days (EPSS): 0.63%, higher than 50.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
software development kit dialog-semiconductor	`≤ 5.0.4`	No fix yet

Description

The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 5.0.4 for DA14580/1/2/3 devices does not properly restrict the L2CAP payload length, allowing attackers in radio range to cause a buffer overflow via a crafted Link Layer packet.

References

asset-group.github.io/disclosures/sweyntooth · Third Party Advisory
dialog-semiconductor.com/products/connectivity/bluetooth-low-energy/smartbond-da14580-and-da14583 · Third Party Advisory

More vulnerabilities in software development kit

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free