Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-9803

20
FAUCET Score

CVE-2016-9803 describes an out-of-bounds read vulnerability in BlueZ version 5.42, specifically within the "le_meta_ev_dump" function in the "tools/parser/hci.c" source file. This issue arises due to an overflow in the 'subevent' variable, leading to incorrect array indexing. Rated with a CVSS v3 score of 5.3 (MEDIUM), it is a network-exploitable vulnerability requiring no user interaction, with a potential impact of low availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
5.42CPE matchmatch criteria
cpe:2.3:a:bluez:bluez:5.42:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.3MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
Exploitability Score
3.9
Impact Score
1.4
CvssVersion
3.0

Exploit Intelligence

EPSS Score
2.47%
Probability of exploitation in next 30 days
EPSS Percentile
82.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0247 is in the 74th percentile among its peer group of 23,705 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (3)

redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: bluez-hcidump
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: bluez
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: bluez

Vendor Advisories (1)

redhatCVE-2016-9803Low

bluez: out-of-bounds read in le_meta_ev_dump()

Dec 3, 2016

References

spinics.net / lists/linux-bluetooth/msg68892.html
ExploitThird Party Advisory
securityfocus.com / bid/94652
Third Party AdvisoryVDB Entry