CVE-2026-82389

The Zephyr RTOS Bluetooth stack is vulnerable to a NULL pointer dereference in the Bluetooth Classic Hands-Free Profile (HFP) Audio Gateway role. The root cause is that bt_hfp_ag_connect() performs a memset() on the entire AG object upon a failed bt_rfcomm_dlc_connect() call, while an embedded no...