CVE-2019-18614

CVE-2019-18614 is a buffer overflow vulnerability affecting Cypress CYW20735 evaluation boards and their firmware. It arises from a mismatch in buffer sizes, where the BLOC buffer for data transmission is capped at 384 bytes, while other configurations expect 1092 bytes. This allows an attacker to trigger an overflow by sending data exceeding 384 bytes, either over the air before pairing or locally by initiating an ACL or SCO connection. Rated 7.8 HIGH, this vulnerability has a low attack complexity and can lead to high impact on confidentiality, integrity, and availability. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.