CVE-2023-27349

2024-05-0311:22:11

redhat.com

access.redhat.com

cve-2023-27349

bluez audio profile

avrcp

array indices

validation

data validation

buffer overflow

network-adjacent attacker

code execution

root context

bluetooth

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

JSON

A vulnerability was found in the BlueZ Audio Profile AVRCP, stemming from the improper validation of array indices. This flaw resides in the AVRCP protocol handling and arises due to inadequate validation of user-supplied data. Consequently, it may lead to writing beyond the bounds of an allocated buffer. This flaw possibly allows a network-adjacent attacker to execute code within the root context via Bluetooth.