Description
No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| zephyrproject-rtos | Zephyr | — | — |
High · 7.5
CVE-2024-8798
EUVD-2024-49616
Bluetooth: classic: avdtp: missing buffer length check
Published Dec 15, 2024 · Updated Sep 17, 2025 · Assigned by zephyr