Lucene search
+L

141 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/30 2:6 p.m.19 views

CVE-2026-28526

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LISTPLAYERAPPLICATIONSETTINGATTRIBUTES and LISTPLAYERAPPLICATIONSETTINGVALUES handlers that allows attackers to read beyond buffer boundaries. A nearby attacker with a paired Bluetooth...

3.5CVSS6AI score0.00143EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/30 2:6 p.m.29 views

CVE-2026-28526

BlueKitchen BTstack prior to 1.8.1 contains an out-of-bounds read in the AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_ATTRIBUTES and LIST_PLAYER_APPLICATION_SETTING_VALUES handlers. An adjacent attacker with a paired Bluetooth Classic connection can send a crafted VENDOR_DEPENDENT response wi...

5.7CVSS6AI score0.00143EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.23 views

BTstack 安全漏洞

BTstack is an open-source Bluetooth stack implemented by BlueKitchen. Versions of BTstack prior to 1.8.1 contained security vulnerabilities; these vulnerabilities stemmed from out-of-bounds read accesses by the AVRCP controller processing program, which could lead to crashes...

5.7CVSS5.8AI score0.00143EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.8 views

MiracleLinux 9 : bluez-5.72-2.el9 (AXSA:2024-9114:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9114:01 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 BlueZ: Audio Profile AVRCP...

8CVSS9AI score0.07879EPSS
SaveExploits9References11
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.6 views

MiracleLinux 8 : bluez-5.63-5.el8_10.ML.1 (AXSA:2025-9877:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9877:01 advisory. BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability CVE-2023-27349 bluez: audio profile avrcp...

8CVSS6.8AI score0.01427EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 8:43 a.m.18 views

CVE-2022-33280

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet...

8.8CVSS7AI score0.00326EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/28 12:42 a.m.17 views

CVE-2025-68474

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrcvendormsg function of the ESP-IDF BlueDroid AVRCP stack, the allocated buffer size was validated using AVRCMINCMDLEN 20 bytes. However, the actual fixed...

6.1CVSS7.5AI score0.00298EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/26 11:57 p.m.38 views

CVE-2025-68474 ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrcvendormsg function of the ESP-IDF BlueDroid AVRCP stack, the allocated buffer size was validated using AVRCMINCMDLEN 20 bytes. However, the actual fixed...

6.1CVSS0.00298EPSS
SaveExploits0References7
OSV
OSV
added 2025/12/26 11:57 p.m.10 views

CVE-2025-68474 ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrcvendormsg function of the ESP-IDF BlueDroid AVRCP stack, the allocated buffer size was validated using AVRCMINCMDLEN 20 bytes. However, the actual fixed...

6.1CVSS7.5AI score
SaveExploits0References9
Cvelist
Cvelist
added 2025/12/02 6:9 p.m.19 views

CVE-2025-66409 ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, when AVRCP is enabled on ESP32, receiving a malformed VENDOR DEPENDENT command from a peer device can cause the Bluetooth stack to access memory before validating the command...

6.9CVSS0.00625EPSS
SaveExploits0References7
OSV
OSV
added 2025/11/13 11:0 a.m.14 views

CLSA-2025-1763031616 bluez: Fix of 10 CVEs

CVE-2023-27349: fix crash while handling unsupported events in avrcp - CVE-2023-44431: fix Stack-based buffer overflow and remote code execution vulnerability - CVE-2023-45866: restrict HID connections to avoid unauthorized input injection - CVE-2023-50229: fix heap-based buffer overflow...

8CVSS7.3AI score0.07879EPSS
SaveExploits9References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-1789

Malware in sbrugna...

7.5CVSS7.5AI score0.00804EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.6 views

Unity Linux 20.1070e Security Update: bluez (UTSA-2025-680605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680605 advisory. BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramslen. Tenable has...

8.8CVSS6.5AI score0.0066EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2023-31125

Malicious code in bioql PyPI...

8CVSS7.2AI score0.01427EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2023-56292

Malicious code in bioql PyPI...

5.7CVSS6.2AI score0.00956EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2022-43812

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00364EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2023-48771

Malicious code in bioql PyPI...

8CVSS6.8AI score0.01563EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2022-50688

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00198EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2022-36323

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00326EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.14 views

EUVD-2025-23399

Malicious code in bioql PyPI...

7.4CVSS7.4AI score0.00272EPSS
SaveExploits0References1
Rows per page
Query Builder