VULNERABILITY INTELLIGENCE

CVE-2016-9798

CVSS score5.3 MEDIUM
EPSS probability3.81%
CISA KEVNot currently listed
Published2016-12-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.

Weakness classification

  • CWE-416: Use After Free

Primary references