NetSight
low3.3

CVE-2021-3588

The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for re…

Impact

The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.

Affected products

VendorProductAffected versions
BluezBluez
before 5.56

Weakness classification

References