CVE-2026-19738 | ZephyrProject Zephyr up to 4.4.x LLCP ull_llcp_cc.c llcp_rp_cc_rx/llcp_lp_cc_rx allocation of resources

October 11, 2026 Yanac

A vulnerability was found in ZephyrProject Zephyr up to 4.4.x. It has been classified as critical. This affects the function llcp_rp_cc_rx/llcp_lp_cc_rx of the file subsys/bluetooth/controller/ll_sw/ull_llcp_cc.c of the component LLCP. This manipulation causes allocation of resources.

This vulnerability appears as CVE-2026-19738. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More