CVE-2024-6258 | zephyrproject-rtos Zephyr up to 3.6 BT rfcomm_handle_data net_buf heap-based overflow (GHSA-7833-fcpm-3ggm)

A vulnerability has been found in zephyrproject-rtos Zephyr up to 3.6 and classified as critical. This vulnerability affects the function rfcomm_handle_data of the component BT. The manipulation of the argument net_buf leads to heap-based buffer overflow.

This vulnerability was named CVE-2024-6258. Access to the local network is required for this attack. There is no exploit available.