CVE-2026-90832

bthcileperadvreportcommon in subsys/bluetooth/host/scan.c handles the HCILEPeriodicAdvertisingReport and v2 event. It verified that the fixed event header was present and that the controller-declared DataLength fits the tailroom of the periodic-sync reassembly buffer, but never checked that the...

PT-2026-144852

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description An issue exists in the bt hci le per adv report common function within subsys/bluetooth/host/scan.c when handling HCI LE Periodic Advertising Report and HCI LE Periodic Advertising Report v2...