Denial of Service Vulnerability in Zephyr Bluetooth Host by Vendor Zephyr Project

CVE-2026-10658

What is CVE-2026-10658?

A vulnerability exists in the Zephyr Bluetooth Host due to a missing length validation in the ISO receive path, allowing attackers to exploit malformed HCI ISO data. Specifically, the vulnerability arises when the processing function accepts data fragments without validating their lengths, potentially leading to a denial of service attack. In both assert-enabled and non-assert builds, this may result in a kernel assert or an out-of-bounds read, respectively, thus compromising the integrity of the system. This flaw underscores the importance of stringent data validation measures, especially in environments where incoming HCI data might be influenced by potentially malicious actors.

References