CVE-2026-79982 | Zephyr Project up to 4.4.2 Bluetooth HCI USB Transport bt_hci.c bt_hci_tx_sync_in data/len buffer overflow

October 23, 2026 Yanac

A vulnerability classified as very critical has been found in Zephyr Project Zephyr up to 4.4.2. Affected by this vulnerability is the function bt_hci_tx_sync_in of the file subsys/usb/device_next/class/bt_hci.c of the component Bluetooth HCI USB Transport. This manipulation of the argument data/len causes buffer overflow.

The identification of this vulnerability is CVE-2026-79982. It is possible to initiate the attack remotely. There is no exploit available.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More