CVE-2026-28528: Out-of-bounds Read

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GETFOLDERITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connection can exploit insufficient bounds...

BTstack 安全漏洞

BTstack is an open-source Bluetooth stack developed by BlueKitchen. Versions of BTstack prior to 1.8.1 contained security vulnerabilities. These vulnerabilities stemmed from out-of-bounds read accesses by the AVRCP controller processing program, which could lead to information leaks and system...

PT-2026-29025

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LIST PLAYER APPLICATION SETTING ATTRIBUTES and LIST PLAYER APPLICATION SETTING VALUES handlers that allows attackers to read beyond buffer boundaries. A nearby attacker with a paired...

EUVD-2023-52934

Malicious code in bioql PyPI...

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

CVE-2024-40568: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

CVE-2024-40568

The btstack mesh Bluetooth stack implementation (from BlueKitchen) contains a Buffer Overflow vulnerability in versions prior to v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 . The flaw resides in the pb_adv_handle_tranaction_cont function within the src/mesh/pb_adv.c component, which can allow a re...

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

PT-2024-28923 · Unknown · Btstack Mesh

Name of the Vulnerable Software and Affected Versions: btstack mesh versions before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 Description: The issue allows a remote attacker to execute arbitrary code via the pb adv handle tranaction cont function in the src/mesh/pb adv.c component. This is a...

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

CVE-2023-48906

A Stack Overflow vulnerability exists in Btstack version 1.6 and earlier , an open-source implementation of the official BlueKitchen Bluetooth stack. The flaw is caused by crafted input processed by the char_for_nibble function. Exploitation of this vulnerability allows an attacker to trigger a d...

Btstack 安全漏洞

Btstack is a BlueKitchen open source implementation of the official BlueKitchen Bluetooth stack. A security vulnerability exists in Btstack version 1.6 and earlier. An attacker exploited the vulnerability to cause a system denial of service via a specially crafted charfornibble function...

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

CVE-2023-48906: Stack-based Buffer Overflow

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...