BLE Security on Espilon

BLE Security on Espilonhttps://blog.espilon.net/series/ble-security/Recent content in BLE Security on EspilonHugoenWed, 03 Jun 2026 00:00:00 +0000CVE-2026-47773: Out-of-Bounds Write in ArduinoBLE's ATT Layerhttps://blog.espilon.net/posts/cve-2026-47773-arduinoble-att-oob-write/Wed, 03 Jun 2026 00:00:00 +0000https://blog.espilon.net/posts/cve-2026-47773-arduinoble-att-oob-write/A missing bounds check in ArduinoBLE's ATT write-request handler lets a remote, unauthenticated BLE client overflow a 64-byte buffer inside the global ATT object with attacker-controlled content. CWE-787 plus CWE-131, fixed in 2.0.2.