diff --git a/subsys/bluetooth/host/scan.c b/subsys/bluetooth/host/scan.c index 35620003c765ad..f0f1557c7f3ab7 100644 --- a/subsys/bluetooth/host/scan.c +++ b/subsys/bluetooth/host/scan.c @@ -1199,7 +1199,7 @@ void bt_hci_le_adv_report(struct net_buf *buf) evt = net_buf_pull_mem(buf, sizeof(*evt)); - if (buf->len <= evt->length) { + if (buf->len < evt->length + sizeof(adv_info.rssi)) { LOG_ERR("Unexpected end of buffer"); break; }