CVE-2026-10651 | zephyrproject-rtos Zephyr up to 4.4.0 SDP Parser sdp.c bt_sdp_parse_attribute out-of-bounds (GHSA-p93g-3r68-cj53)

June 23, 2026 Yanac

A vulnerability was found in zephyrproject-rtos Zephyr up to 4.4.0 and classified as problematic. This issue affects the function bt_sdp_parse_attribute of the file subsys/bluetooth/host/classic/sdp.c of the component SDP Parser. Executing a manipulation can lead to out-of-bounds read.

This vulnerability appears as CVE-2026-10651. The attacker needs to be present on the local network. There is no available exploit.VulDB Recent EntriesRead More