Arm Mbed vulnerabilities

6 CVEs affecting Arm Mbed, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-48986, published 2024-11-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-27435, published 2022-05-03. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a…
CVE-2024-48986, published 2024-11-20. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from its header. Certain events cause a callback, the…
CVE-2024-48982, published 2024-11-20. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from its header. This value is assumed to be greater…
CVE-2024-48983, published 2024-11-20. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by reading 2 bytes from the packet header. A buffer is…
CVE-2024-48985, published 2024-11-20. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by reading 2 bytes from the packet data. A buffer is…
CVE-2024-48981, published 2024-11-20. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet header by looking up the identifying first byte and matching…