CVE-2016-9803

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42

Description An out-of-bounds read issue was found in the le meta ev dump function, located in the tools/parser/hci.c source file. This occurs because the subevent variable, used to read the correct element from the ev le meta str array, is overflowed.

Recommendations For BlueZ version 5.42, as a temporary workaround, consider disabling the le meta ev dump function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.