CVE-2026-13213 | Zephyr Project up to 4.4.1 Hearing Access Service has.c security_changed null pointer dereference

August 24, 2026 Yanac

A vulnerability was found in Zephyr Project Zephyr up to 4.4.1. It has been classified as critical. Affected by this vulnerability is the function security_changed of the file subsys/bluetooth/audio/has.c of the component Hearing Access Service. This manipulation causes null pointer dereference.

This vulnerability is registered as CVE-2026-13213. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More