CVE-2025-36911_scan

CVE-2025-36911 scanner Tests unauthenticated BR/EDR L2CAP connections to audio PSMs A2DP/AVRCP and detects Fast Pair service GFPS on BLE. Requirements Linux BlueZ installed and bluetooth service active for BLE functionality. Bluetooth adapter enabled bluetoothctl power on. Debian based OS...

Linux Distros Unpatched Vulnerability : CVE-2026-85218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - bluez - None Red Hat Enterprise Linux - bluez: bluez: AVRCP ListPlayerAttributes double stack overflow in...

CVE-2026-85218

A double stack-based buffer overflow was found in the BlueZ AVRCP controller implementation. A nearby BR/EDR peripheral can send a crafted AVRCP player-settings response that supplies an attacker-controlled attribute count, causing avrcplistplayerattributesrsp and avrcpgetcurrentplayervalue in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104800 advisory. Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block...

Astra Linux – Vulnerability in bluez

Before version 5.59 of BlueZ, physically nearby attackers could obtain sensitive information because the parameters in the profiles/audio/avrcp.c files were not validated for their length...

SUSE CVE-2026-76917

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-18282

Sony XAV-9500ES AVRCPBrResponseParser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...

EUVD-2026-63429

Sony XAV-9500ES AVRCPBrResponseParser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...

CVE-2026-18282

The Sony XAV-9500ES infotainment system is vulnerable to a heap-based buffer overflow in the AVRCP_Br_Response_Parser component. The parser fails to validate the length of attacker-supplied AVRCP packet data before copying it to a heap buffer, enabling remote code execution after an attacker pair...

CVE-2026-76917

A flaw was found in Wireshark. A heap-based buffer overflow vulnerability exists within the Bluetooth Audio/Video Remote Control Profile AVRCP protocol dissector. This flaw can be triggered by a local user processing a specially crafted Bluetooth AVRCP packet, which requires user interaction...

EUVD-2026-63175

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-76917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76917 Note that Nessus relies on the...

AZL-96797 CVE-2026-76917 affecting package wireshark 4.4.7-2

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

UBUNTU-CVE-2026-76917

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76917

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76917 Heap-based Buffer Overflow in Wireshark

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76917

A heap-based buffer overflow exists in the Bluetooth AVRCP (Audio/Video Remote Control Profile) protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 . A local user who processes a specially crafted Bluetooth AVRCP packet can trigger a crash of the Wireshark application, res...

CVE-2026-76917

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

PT-2026-78853

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A heap-based buffer overflow in the Bluetooth AVRCP Profile protocol dissector can lead to a crash, resulting in a denial of service. Recommendations...

AZL-96861 CVE-2026-75032 affecting package bluez 5.63-6

A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile AVRCP implementation allows a malicious Bluetooth device within range to cause an out-of-bounds memory read. This vulnerability, affecting the...