BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2026-81075

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description A stack-based buffer overflow exists in the A2DP Advanced Audio Distribution Profile component of the BlueZ Bluetooth stack. This flaw allows for remote code execution. Recommendations At the...

CVE-2026-16473

A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory. Mitigation...

EUVD-2020-1728

Malware in sbrugna...

EUVD-2018-8115

Malware in sbrugna...

EUVD-2023-25120

Malicious code in bioql PyPI...

EUVD-2021-3618

Malicious code in bioql PyPI...

EUVD-2022-43778

Malicious code in bioql PyPI...

EUVD-2022-36311

Malicious code in bioql PyPI...

EUVD-2025-23800

Malicious code in bioql PyPI...

CVE-2025-21474

Memory corruption while processing commands from A2dp sink command queue...

CVE-2025-21474

Memory corruption while processing commands from A2dp sink command queue...

CVE-2025-21474 Use After Free in BTHOST

Memory corruption while processing commands from A2dp sink command queue...

CVE-2025-21474

CVE-2025-21474 describes a memory corruption issue in Qualcomm chipsets triggered while processing commands from the A2dp sink command queue. The root cause is related to memory handling during queue processing, with the CVSSv3.1 base metrics indicating HIGH impact on confidentiality, integrity, ...

CVE-2025-21474 Use After Free in BTHOST

Memory corruption while processing commands from A2dp sink command queue...

CVE-2025-21474: Use After Free

Memory corruption while processing commands from A2dp sink command queue...

PT-2025-32129 · A2Dp · A2Dp

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-21474 Description: A memory corruption issue exists while processing commands from the A2dp sink command queue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2023-20952

In A2DPBuildCodecHeaderSbc of a2dpsbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2022-20552

In btifa2dpsinkcommandready of btifa2dpsink.cc, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Andro...

CVE-2018-16263

The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...