-
CVSS Score
-The vulnerability description explicitly mentions the read_n function in tools/hcidump.c. The provided spinics.net URL contains an ASAN report that confirms a heap-buffer-overflow in this function when processing a corrupted dump file. The report includes the call stack and the affected code, which clearly shows the read call that causes the overflow. Therefore, read_n is identified as the vulnerable function with high confidence.