In the Linux kernel through 6.2.8, net/bluetooth/hcisync.c allows out-of-bounds access because ampinit1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-28866.json"