CVE-2026-9263: Zephyr Bt Isoal Seg Len Underflow

ISO Adaptation Layer lacks segment header length validation before subtracting time offset size, leading to an integer underflow and out-of-bounds read.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-9263-zephyr-bt-isoal-seg-len-underflow --engine opengrep

Description

ISO Adaptation Layer lacks segment header length validation before subtracting time offset size, leading to an integer underflow and out-of-bounds read.