CVE-2026-65933BT122 malformed packet with increased length field causes memory leak

Description

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://community.silabs.com/068Vm00000x0Yqy vendor-advisorypermissions-required
• https://arxiv.org/pdf/2409.02905 related