Threats tagged 'ghsa-r6wm-2pr2-7xgp'

A vulnerability in the Linux kernel's Bluetooth component (btintel) was resolved that involved improper validation of version TLV value lengths. The function btintel_parse_version_tlv() did not ensure that the value length was sufficient for the specific TLV type, which could lead to out-of-bounds reads. This issue was addressed by rejecting values shorter than the minimum required length and responses missing the Command Complete Status field.