CVE-2022-3806: Zephyrproject Zephyr

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer.

Affected products

• Zephyrproject Zephyr: up to and including 3.2.0

Published 2023-01-25. Last modified 2026-06-17.