CVE-2016-9800

In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pin_code_reply_cp *cp" parameter.

• CWE-119

• http://www.securityfocus.com/bid/94652Third Party Advisory, VDB Entry
• https://www.spinics.net/lists/linux-bluetooth/msg68892.htmlExploit, Third Party Advisory
• http://www.securityfocus.com/bid/94652Third Party Advisory, VDB Entry
• https://www.spinics.net/lists/linux-bluetooth/msg68892.htmlExploit, Third Party Advisory

Published

Dec 3, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9794Race condition in the snd_pcm_period_elapsed function in sou…7.8
• CVE-2016-9795The casrvc program in CA Common Services, as used in CA Clie…7.8
• CVE-2016-9796Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes differ…
• CVE-2016-9797In BlueZ 5.42, a buffer over-read was observed in "l2cap_dum…
• CVE-2016-9798In BlueZ 5.42, a use-after-free was identified in "conf_opt"…
• CVE-2016-9799In BlueZ 5.42, a buffer overflow was observed in "pklg_read_…
• CVE-2016-9801In BlueZ 5.42, a buffer overflow was observed in "set_ext_ct…
• CVE-2016-9802In BlueZ 5.42, a buffer over-read was identified in "l2cap_p…
• CVE-2016-9803In BlueZ 5.42, an out-of-bounds read was observed in "le_met…
• CVE-2016-9804In BlueZ 5.42, a buffer overflow was observed in "commands_d…
• CVE-2016-9806Race condition in the netlink_dump function in net/netlink/a…7.8
• CVE-2016-9807The flx_decode_chunks function in gst/flx/gstflxdec.c in GSt…