BTstack 安全漏洞

BTstack is an open-source Bluetooth stack developed by BlueKitchen. Versions of BTstack prior to 1.8.1 contained security vulnerabilities. These vulnerabilities stemmed from out-of-bounds read accesses by the AVRCP controller processing program, which could lead to information leaks and system...

CVE-2026-28527: Out-of-bounds Read

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GETPLAYERAPPLICATIONSETTINGATTRIBUTETEXT and GETPLAYERAPPLICATIONSETTINGVALUETEXT handlers that allows nearby attackers to read beyond packet boundaries. Attackers can establish a paire...

CVE-2026-28528: Out-of-bounds Read

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GETFOLDERITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connection can exploit insufficient bounds...

EUVD-2023-52934

Malicious code in bioql PyPI...

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

CVE-2024-40568: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

CVE-2024-40568

A Buffer Overflow vulnerability exists in the btstack mesh stack (versions prior to v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 ). The flaw is located in the src/mesh/pb_adv.c component within the pb_adv_handle_tranaction_cont function. A remote attacker can exploit this vulnerability to achieve a...

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

PT-2024-28923 · Unknown · Btstack Mesh

Name of the Vulnerable Software and Affected Versions: btstack mesh versions before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 Description: The issue allows a remote attacker to execute arbitrary code via the pb adv handle tranaction cont function in the src/mesh/pb adv.c component. This is a...

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

CVE-2023-48906

A Stack Overflow vulnerability exists in Btstack version 1.6 and earlier , which is an open-source implementation of the official BlueKitchen Bluetooth stack. The flaw is located in the char_for_nibble function and can be triggered by an attacker providing crafted input . Successful exploitation ...

Btstack 安全漏洞

Btstack is a BlueKitchen open source implementation of the official BlueKitchen Bluetooth stack. A security vulnerability exists in Btstack version 1.6 and earlier. An attacker exploited the vulnerability to cause a system denial of service via a specially crafted charfornibble function...

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

CVE-2023-48906: Stack-based Buffer Overflow

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...