190 matches found
CVE-2025-36911_scan
Escáner CVE-2025-36911 Prueba conexiones L2CAP BR/EDR no autenticadas a PSMs de audio A2DP/AVRCP y detecta el servicio Fast Pair GFPS en BLE. Requisitos Linux BlueZ instalado y el servicio bluetooth activo para la funcionalidad BLE. Adaptador Bluetooth habilitado bluetoothctl power on. SO basado ...
Astra Linux – Vulnerability in bluez
Before version 5.59 of BlueZ, physically nearby attackers could obtain sensitive information because the parameters in the profiles/audio/avrcp.c files were not validated for their length...
Linux Distros Unpatched Vulnerability : CVE-2026-85218
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AVRCP ListPlayerAttributes double stack overflow in avrcplistplayerattributesrsp/avrcpgetcurrentplayervalue fedora-all CVE-2026-85218 Note that Nessus relies on...
CVE-2026-85218
A double stack-based buffer overflow was found in the BlueZ AVRCP controller implementation. A nearby BR/EDR peripheral can send a crafted AVRCP player-settings response that supplies an attacker-controlled attribute count, causing avrcplistplayerattributesrsp and avrcpgetcurrentplayervalue in...
OESA-2026-3528 bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control...
Fedora 43 : bluez (2026-a1cdcc1604)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a1cdcc1604 advisory. An out-of-bounds read flaw was found in BlueZ in the AVRCP profile implementation. The vulnerability exists in the parsemediaelement and parsemediafolder...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104800)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104800 advisory. Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block...
SUSE CVE-2026-75032
A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile AVRCP implementation allows a malicious Bluetooth device within range to cause an out-of-bounds memory read. This vulnerability, affecting the...
The vulnerability of the Bluetooth AVRCP protocol analyzer in Wireshark allows a hacker to cause a service failure.
The vulnerability of the Bluetooth AVRCP protocol analyzer and the traffic analysis module of Wireshark is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...
Fedora 44 : bluez (2026-1bbec06c4d)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1bbec06c4d advisory. An out-of-bounds read flaw was found in BlueZ in the AVRCP profile implementation. The vulnerability exists in the parsemediaelement and parsemediafolder...
SUSE CVE-2026-76917
Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-18282
Sony XAV-9500ES AVRCPBrResponseParser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...
CVE-2026-18282 Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
Sony XAV-9500ES AVRCPBrResponseParser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...
CVE-2026-18282
The Sony XAV-9500ES infotainment system is vulnerable to a heap-based buffer overflow in the AVRCP_Br_Response_Parser component. The parser fails to validate the length of attacker-supplied AVRCP packet data before copying it to a heap buffer, enabling remote code execution after an attacker pair...
EUVD-2026-63429
Sony XAV-9500ES AVRCPBrResponseParser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...
CVE-2026-76917
A flaw was found in Wireshark. A heap-based buffer overflow vulnerability exists within the Bluetooth Audio/Video Remote Control Profile AVRCP protocol dissector. This flaw can be triggered by a local user processing a specially crafted Bluetooth AVRCP packet, which requires user interaction...
EUVD-2026-63175
Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
Linux Distros Unpatched Vulnerability : CVE-2026-76917
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76917 Note that Nessus relies on the...