CVE-2026-105460
MEDIUM
NVD
CVSS Score
5.5
Severity
MEDIUM
Published
Oct 13, 2026
Vendor
unknown
Description
A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to read beyond the allocated buffer and crash.