Buffer Overflow in Bluetooth HCI USB Transport Class Affects Zephyr Project

CVE-2026-79982

What is CVE-2026-79982?

The Bluetooth HCI USB transport class in the Zephyr Project is vulnerable to a buffer overflow due to improper handling of packets sent from the Bluetooth controller to the host. The vulnerability arises from the inadequate buffer size allocated for HCI packets, which allows for an overflow into adjacent memory. This flaw can potentially be exploited by an unauthenticated attacker within Bluetooth range, leading to arbitrary code execution on systems lacking memory protection features. Mitigation has been introduced by resizing the buffer pool for the controller-to-host direction, enhancing safety against such vulnerabilities.

References