Vulnerability in Zephyr Bluetooth Controller Affects Communication Integrity

CVE-2026-9263

What is CVE-2026-9263?

The Zephyr Bluetooth Controller's ISO Adaptation Layer has a critical flaw that allows attackers to send poorly formatted packets, leading to potential out-of-bounds reading of controller memory. The issue arises from the improper validation of the length field in ISO PDU start segments, enabling malicious actors to exploit this vulnerability remotely. When segments with insufficient length (less than 3 bytes) are accepted, it can result in unintended, oversized memory access during data handling, causing information disclosure and possible denial of service on affected devices.

References