2018-12-07 00:29:01 2019-01-25 15:50:04

The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.