Is CVE-2019-18614 actively exploited?

No active exploitation of CVE-2019-18614 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2019-18614 be exploited remotely?

No. CVE-2019-18614 requires local access to exploit.

What is the CVSS score of CVE-2019-18614?

CVE-2019-18614 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2019-18614

HIGH

CVE-2019-18614

CWE-787Published: June 16, 2020· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow. This is because the maximum BLOC buffer size for sending and receiving data is set to 384 bytes, but everything else is still configured to the usual size of 1092 (which was used for everything in the previous CYW20719 and later CYW20819 evaluation board). To trigger the overflow, an attacker can either send packets over the air or as unprivileged local user. Over the air, the minimal PoC is sending "l2ping -s 600" to the target address prior to any pairing. Locally, the buffer overflow is immediately triggered by opening an ACL or SCO connection to a headset. This occurs because, in WICED Studio 6.2 and 6.4, BT_ACL_HOST_TO_DEVICE_DEFAULT_SIZE and BT_ACL_DEVICE_TO_HOST_DEFAULT_SIZE are set to 384.

NVD Source

Technical Analysis

CVE-2019-18614 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.

From a weakness classification perspective (CWE-787): Out-of-bounds write vulnerabilities can lead to data corruption, crashes, or arbitrary code execution.