What is CVE-2019-19196?

CVE-2019-19196 is a medium-severity vulnerability in Telink-Semi Tlsr8232, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.5/10. Published 2020-02-12.

How severe is CVE-2019-19196?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2019-19196 known to be exploited?

6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Telink-Semi Tlsr8232

CVE-2019-19196

The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices accepts a pairing request with a key size greater than 16 bytes, allowing an attacker in radio range to cause a buffer overflow and denial of service (crash) via crafted packets.

Vulnerability class: Buffer Overflow

EPSS: 0.014 (68.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-19196?: CVE-2019-19196 is a medium-severity vulnerability in Telink-Semi Tlsr8232, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.5/10. Published 2020-02-12.
How severe is CVE-2019-19196?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2019-19196 known to be exploited?: 6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.