In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.
Linux Kernel 6.x/5.15 LTS | Android 14/13
Exploit
CVE-2016-10391
NVD
Refer to CVE-2016-10391 NVD advisory