Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Zephyr | Zephyrproject | * | 3.2.0 (including) |