CVE-2016-9804 is a buffer overflow vulnerability in BlueZ 5.42, specifically within the "commands_dump" function in "tools/parser/csr.c". This flaw allows an attacker to cause a denial of service (hcidump crash) by processing a specially crafted or corrupted dump file due to insufficient boundary checks. Rated as Medium severity (CVSS 5.3), it requires no user interaction and can be triggered remotely, though it only impacts availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.42CPE matchmatch criteria | cpe:2.3:a:bluez:bluez:5.42:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.