CVE-2020-26558

[ToKo_4602001]

This inquiry is about the following post.

https://community.cypress.com/t5/ModusToolbox-Bluetooth-SDK/CYW20819-SDK2-9-Security/m-p/280640

I could not find the description about this CVE-2020-26558 issue in the "AIROC Bluetooth SDK 3.1 Release Notes.pdf".

Please let me know whether the issue has been fixed with SDK 3.1 or not.

Thanks.

[DheerajPK_41 · Accepted solution]

Edited

Hi,

I confirmed internally. The fixes are already applied for CVE-2020-26558 and BTSDK3.1 have these fixes. Usually we share these info through our community. Seems like it is not yet updated. 

Thanks,

-Dheeraj 

[ToKo_4602001]

Thank you for this answer.

If possible we'd like Infineon/Cypress to add the information to some document like release note.

Regards,

[DheerajPK_41]

Sure,

We usually publish these information either through Release note or through Community.  I will share the feedback to the concerned team internally to speed up the work to document it in the Community (Modustoolbox Bluetooth SDK page).

Thanks,

-Dheeraj 

[ToKo_4602001]

Thank you for your support!