CVE-2016-9799: In BlueZ 5.42, a buffer overflow was observed in "pklg_read_hci" function in "btsnoop.c" source file.

Security readout for executives and security teams

This issue affects BlueZ 5.42’s Bluetooth monitoring tooling. A corrupted dump file can crash btmon while it is being analyzed. The source bundle does not show active exploitation, CVSS scoring, or a confirmed broader system impact beyond the tool crash. Exposure is most likely on Linux systems with BlueZ 5.42 where btmon is used to inspect Bluetooth dump files, especially files from external or untrusted sources. The bundle does not support claims of remote exposure or impact to normal Bluetooth connectivity. Handle through normal vulnerability maintenance unless btmon is used heavily with untrusted dump files. Business urgency is limited by the documented impact of a tool crash and lack of active exploitation evidence in the provided sources. Mitigation focus: Avoid opening untrusted Bluetooth dump files with vulnerable btmon versions.; Check BlueZ and OS vendor guidance for fixed or backported packages.; Update BlueZ packages where vendor advisories indicate this issue is fixed..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.