CVE-2026-77684 | ZephyrProject Zephyr up to 4.4.2 Bluetooth HFP Host hfp_hf.c hfp_hf_disconnected resource consumption

October 20, 2026 Yanac

A vulnerability classified as critical was found in ZephyrProject Zephyr up to 4.4.2. Affected by this vulnerability is the function hfp_hf_disconnected of the file subsys/bluetooth/host/classic/hfp_hf.c of the component Bluetooth HFP Host. Such manipulation leads to resource consumption.

This vulnerability is documented as CVE-2026-77684. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More