CVE-2019-17518: Dialog-Semiconductor Software Development Kit

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 1.0.14.1081 for DA1468x devices responds to link layer packets with a payload length larger than expected, allowing attackers in radio range to cause a buffer overflow via a crafted packet. This affects, for example, August Smart Lock.

Affected products

• Dialog-Semiconductor Software Development Kit: up to and including 1.0.14.1081

Published 2020-02-10. Last modified 2026-06-17.