CVE-2019-17518

MEDIUM

6.5

CVSS Score

Published: February 10, 2020 at 08:22 PM UTC

Updated: June 17, 2026 at 02:24 AM UTC

5 products affected across 1 vendorSoftware Development KitDa14681Da14682

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 0.8%

Description

The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 1.0.14.1081 for DA1468x devices responds to link layer packets with a payload length larger than expected, allowing attackers in radio range to cause a buffer overflow via a crafted packet. This affects, for example, August Smart Lock.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Software Development Kit · Dialog Semiconductor

95%

v ≤ 1.0.14.1081

dialog-semiconductor-da14680 (environment) · dialog-semiconductor-da14681 (environment) · dialog-semiconductor-da14682 (environment) · dialog-semiconductor-da14683 (environment)

Da14680 · Dialog Semiconductordevice

80%

All versions

Da14681 · Dialog Semiconductordevice

80%

All versions

Da14682 · Dialog Semiconductordevice

80%

All versions

Da14683 · Dialog Semiconductordevice

80%

All versions