Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host.