SUSE CVE-2023-51592

BlueZ Audio Profile AVRCP parsemediafolder Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability i...

(0Day) BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device. The specific flaw exists within the handling o...

(0Day) BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device. The specific flaw exists within the handling o...

PT-2023-31859

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description This issue allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this issue, as the targe...

(0Day) BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device. The specific flaw exists within the handling o...

(0Day) BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device. The specific flaw exists within the handling of the...

PT-2023-31857

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description This issue allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this issue, as the targe...

PT-2023-31856

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description This issue allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this issue, as the targe...

CVE-2023-40087

In transcodeQToFloat of btifavrcpaudiotrack.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-9086

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description The issue is related to a stack-based buffer overflow in the Audio Profile AVRCP component of the BlueZ Bluetooth protocol stack for Linux. This allows network-adjacent attackers to execute...

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device. The specific flaw exists within the handling of the...

PT-2023-8670 · Bluez +9 · Bluez +9

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to the improper validation of array indexes in the AVRCP protocol handling of BlueZ, which can result in a write past the end of an allocated buffer. This allows...

Memory corruption

Memory corruption in Bluetooth HOST while processing the AVRCPDUGETPLAYERAPPVALUETEXT AVRCP response...

CVE-2022-40537

CVE-2022-40537 is a memory corruption issue in the Bluetooth HOST when handling the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. The connected sources identify this as affecting Qualcomm Bluetooth components (e.g., Snapdragon) and classify the issue under Bluetooth with a high/critical impa...

SUSE CVE-2022-39176

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramslen...

Memory corruption

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet...

CVE-2022-33280 Access of uninitialized pointer in Bluetooth HOST

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet...

CVE-2022-33280

CVE-2022-33280 describes a memory corruption in the Bluetooth HOST when processing AVRCP packets due to an uninitialized pointer. The issue is attributed to Qualcomm components (Bluetooth) and is listed across multiple feeds (NVD, Red Hat, CVE.org, CNNVD, etc.) as a memory corruption vulnerabilit...

CVE-2022-33280: Access of Uninitialized Pointer

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet...

Huawei EMUI and HarmonyOS Denial of Service Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is to provide a full-scenario distributed operating system based on microkernel. A denial of service vulnerability exists in Huawei EMUI and HarmonyOS, which originates from its Bluetooth AVRCP module and can be...