Vulnetix
Try Vulnetix Request Demo
CVE-2016-9803 PUBLISHED

In BlueZ 5.42, an out-of-bounds read was observed in "le_meta_ev_dump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' (which is used to read correct element from 'ev_le_meta_str' array) is overflowed.

EPSS 0.42% · 61.8th percentile

Risk Scores

EPSS Score
0.42%
61.8th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSbluez5.48-0ubuntu3, 5.48-0ubuntu3.1, 5.48-0ubuntu3.4
Ubuntu:24.04:LTSbluez5.72-0ubuntu5, 5.72-0ubuntu5.1, 5.72-0ubuntu4
Ubuntu:20.04:LTSbluez5.51-0ubuntu2, 0, 5.50-0ubuntu4
Ubuntu:Pro:16.04:LTSbluez5.37-0ubuntu5.3+esm5, 5.37-0ubuntu5.3+esm4, 5.37-0ubuntu5.3+esm3
Ubuntu:22.04:LTSbluez5.63-0ubuntu2, 5.64-0ubuntu1, 5.64-0ubuntu1.1
Ubuntu:25.10bluez0, 5.79-2ubuntu1, 5.82-1

Timeline

References

Open in Interactive Console →