CVE-2026-81508

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

CVE-2026-81508

The ESF-IDF (Espressif Internet of Things Development Framework) versions 5.5.5 , 6.0.1 , and 6.1 are vulnerable to an out-of-bounds read in the BlueDroid A2DP sink function btc_a2dp_sink_handle_inc_media(). The root cause is that the function reads a timestamp field from a received media buffer ...

CVE-2026-81508 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

EUVD-2025-23800

Malicious code in bioql PyPI...

CVE-2025-21474

Memory corruption while processing commands from A2dp sink command queue...

CVE-2025-21474

Memory corruption while processing commands from A2dp sink command queue...

CVE-2025-21474

CVE-2025-21474 describes a memory corruption issue in Qualcomm chipsets triggered while processing commands from the A2dp sink command queue. The root cause is related to memory handling during queue processing, with the CVSSv3.1 base metrics indicating HIGH impact on confidentiality, integrity, ...

CVE-2025-21474 Use After Free in BTHOST

Memory corruption while processing commands from A2dp sink command queue...

CVE-2025-21474 Use After Free in BTHOST

Memory corruption while processing commands from A2dp sink command queue...

CVE-2025-21474: Use After Free

Memory corruption while processing commands from A2dp sink command queue...

CVE-2022-20552

In btifa2dpsinkcommandready of btifa2dpsink.cc, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Andro...