Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2021-3588

memory contents disclosure in cli_feat_read_cb

Description

The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BlueZ BlueZ

  • unspecified to < 5.56affected

References