CVE-2018-16986

—

CVSS 3.0

8.8 high

EPSS

3%p86

Published

Nov 6, 2018 (Nov 6, 2018)

Modified

Jun 17, 2026

Description

Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that triggers a buffer overflow.

Vendors: ti
Products: ble-stack
Weakness: CWE-787
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news3 stories

Round two: Microsoft prepares to release Windows 10 October 2018 Update... again!

Help Net SecurityNov 9, 00:00 UTC · Nov 9, 2018Exploit / PoC CVE-2018-16986 CVE-2018-7080

BLEEDINGBIT Bluetooth flaws expose enterprises to remote attacks

Security AffairsNov 1, 21:40 UTC · Nov 1, 2018Exploit / PoC CVE-2018-16986 CVE-2018-7080

Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks

The Hacker NewsNov 1, 18:48 UTC · Nov 1, 2018Exploit / PoC CVE-2018-16986 CVE-2018-7080