{"id":"CVE-2022-26527","aliases":["EUVD-2022-31084","GHSA-63gh-5vqp-xfgp"],"status":"published","title":"Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow","description":"Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00469,"percentile":0.40862,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2022-08-30T04:25:24Z","modified":"2026-06-17T04:35:21Z","products":[{"vendor":"realtek","product":"bluetooth_mesh_software_development_kit"},{"vendor":"realtek","product":"linux/android bluetooth mesh sdk"}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-6457-66bc9-1.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26527"},{"url":"https://github.com/advisories/GHSA-63gh-5vqp-xfgp"}],"sources":{"cve":[{"id":"CVE-2022-26527","title":"Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow","description":"Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.","status":"published","published":"2022-08-30T04:25:24.948Z","modified":"2024-09-16T17:02:52.276Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:25.954329Z"}],"euvd":[{"id":"EUVD-2022-31084","description":"Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.","status":"published","published":"2022-08-30T04:25:24Z","modified":"2024-09-16T17:02:52Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:55:45.787721Z"}],"ghsa":[{"id":"GHSA-63gh-5vqp-xfgp","title":"Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient...","description":"Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.","status":"published","published":"2022-08-31T00:00:24Z","modified":"2023-01-31T05:02:29Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:48:16.386554Z"}],"nvd":[{"id":"CVE-2022-26527","description":"Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.","status":"published","published":"2022-08-30T05:15:07.783Z","modified":"2026-06-17T04:35:21.383Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:25.883929Z"}]}}