ROS-20220628-02

A vulnerability in the Bluetooth protocol stack for Linux BlueZ is related to insufficient validation of user input during A2DP profile processing. user input during A2DP profile processing. Exploitation of the vulnerability could allow an attacker, remotely, transmit specially crafted data to th...

PT-2022-3343

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description The issue is related to insufficient input validation when handling the A2DP profile in the Bluetooth protocol stack for Linux. This can be exploited by a remote attacker using specially crafte...

PT-2022-37572

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description The issue is related to incorrect validation of certain capabilities and lengths when handling the A2DP profile. A remote attacker could exploit this to cause BlueZ to crash, resulting in a...

USN-5481-1 bluez vulnerabilities

It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code...