CVE-2026-85034 | Zephyr Project up to 4.3.1/4.4.x Bluetooth Host bap_unicast_client.c unicast_client_ep_notify out-of-bounds write

A vulnerability classified as very critical was found in Zephyr Project Zephyr up to 4.3.1/4.4.x. Affected by this vulnerability is the function unicast_client_ep_notify of the file subsys/bluetooth/audio/bap_unicast_client.c of the component Bluetooth Host. Executing a manipulation can lead to out-of-bounds write.

This vulnerability is handled as CVE-2026-85034. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More