CVE-2024-6258: Zephyrproject Zephyr

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

BT: Missing length checks of net_buf in rfcomm_handle_data

Affected products

• Zephyrproject Zephyr: before 3.6.0 (fixed in 3.6.0)

Published 2024-09-13. Last modified 2026-06-17.