doc: security: Disclose CVE-2024-8798 (c616a171) · Commits · Wenxi XU / zephyr

doc/security/vulnerabilities.rst

+12 −1

Changes for doc/security/vulnerabilities.rst: 12 added lines, 1 removed line.
Original line number	Diff line number	Diff line
		@@ -1788,7 +1788,18 @@ This has been fixed in main for v3.7.0
		:cve:`2024-8798`
		----------------

		Under embargo until 2024-11-22
		Bluetooth: classic: avdtp: missing buffer length check

		- `Zephyr project bug tracker GHSA-r7pm-f93f-f7fp
		<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-r7pm-f93f-f7fp>`_

		This has been fixed in main for v4.0.0

		- `PR 77969 fix for main
		<https://github.com/zephyrproject-rtos/zephyr/pull/77969>`_

		- `PR 78409 fix for 3.7
		<https://github.com/zephyrproject-rtos/zephyr/pull/78409>`_

		:cve:`2024-10395`
		-----------------