CVE-2026-105460

A stack-based out-of-bounds read vulnerability exists in the BlueZ project's btmon Bluetooth monitor tool. The flaw occurs within the return_link_keys_evt() function due to an unvalidated num_keys parameter when processing HCI Return Link Keys events. A maliciously crafted btsnoop capture file ca...

CVE-2026-105460 Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()

A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to...

CVE-2026-105460

A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to...