Bluetooth Driver Vulnerability in Infineon PSOC 6 Products

CVE-2026-78117

What is CVE-2026-78117?

The Infineon PSOC 6 BLESS HCI driver contains a vulnerability where the outgoing HCI packet descriptor is stored in a file-scope variable. This design flaw allows potential information disclosure when two senders interleave transmissions. Specifically, the shared descriptor can be interfered with, leading to the controller transmitting data potentially from incorrect or recycled memory buffers. When this issue occurs, the Bluetooth host may inadvertently disclose adjacent RAM contents to connected peers. A fix has been implemented by making the packet descriptor a local variable, which enhances the driver's security by eliminating the shared state risk.

References