A use-after-free was found in the conf_opt() function in the tools/parser/l2cap.c source file of bluez. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash. Original report: https://www.spinics.net/lists/linux-bluetooth/msg68892.html
Created bluez-hcidump tracking bugs for this issue: Affects: fedora-all [bug 1401549]