CVE-2026-87040 - Bluetooth LE Controller accepts received PDUs whose length field exceeds the configured maximum receive length, causing out-of-bounds read and write
CVE ID :CVE-2026-87040 Published : Nov. 4, 2026, 6:17 a.m. | 47 minutes ago Description :The nRF link-layer receive paths of the open-source Bluetooth LE Controller did not validate the on-air LENGTH field of a received PDU against the maximum receive length that was used to program the...