CVE-2016-9918 PUBLISHED

In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

EPSS 0.49% · 65.3th percentile

Risk Scores

EPSS Score
0.49%
65.3th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSbluez5.72-0ubuntu4, 5.72-0ubuntu3, 5.72-0ubuntu1
Ubuntu:Pro:16.04:LTSbluez0, 5.35-0ubuntu2, 5.36-0ubuntu1
Ubuntu:22.04:LTSbluez0, 5.64-0ubuntu1.4, 5.64-0ubuntu1.3
Ubuntu:Pro:18.04:LTSbluez5.48-0ubuntu3.3, 5.48-0ubuntu3.9+esm2, 5.48-0ubuntu3.9+esm1
Ubuntu:20.04:LTSbluez5.52-0ubuntu1, 5.51-0ubuntu1, 0
Ubuntu:25.10bluez5.83-1~exp1ubuntu0.1, 5.83-1~exp1, 0

Timeline

References

Open in Interactive Console →