CVE-2016-9918 - CVE House

Status published High CVE-2016-9918

In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump"...

7.5 CVSS

Vulnerability Description

In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-9918

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from bluez project

View All →

CVE-2006-6899

hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to...

Medium 5.4

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers...

Medium 5

CVE-2005-2547

security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows...

High 7.5

Affected Vendor

bluez project

View all reports →

Affected Software

bluez

Vulnerable Versions:

5.42

Timeline

Official Publish: December 8th, 2016

Last Modified: August 6th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.