CVE-2026-9263 — Out-of-bounds read in Bluetooth Controller ISOAL framed RX reassembly leaks adjacent memory into host HCI ISO packets

CVE-2026-9263 is an out-of-bounds read vulnerability in Bluetooth Controller ISOAL framed receive reassembly. The vulnerability leaks adjacent memory into host HCI ISO packets.