← CVE Intelligence

CVE-2021-3588

memory contents disclosure in cli_feat_read_cb PUBLISHED

Description (CNA)

The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.

Affected (CNA)

Vendor / productVersions
BlueZ / BlueZaffected unspecified before 5.56

CWE

CWE-788, CWE-125

References

ADP enrichment

CVE

No English description supplied.