86 matches found
CVE-2026-93015
BlueKitchen BTstack through 1.8.2 fails to validate the peer-reported endpoint count against table bounds in A2DP stream endpoint discovery. A bonded peer can send an AVDTP DISCOVER response with more endpoints than the fixed table holds, causing out-of-bounds writes that corrupt adjacent static...
CVE-2026-93015
BlueKitchen BTstack through 1.8.2 contains an out-of-bounds write in the A2DP stream endpoint discovery path. The vulnerable code in a2dp.c and avdtp.c fails to validate the peer-reported endpoint count against the bounds of a fixed table when processing an AVDTP DISCOVER response. A bonded peer ...
EUVD-2026-81684
BlueKitchen BTstack through 1.8.2 fails to validate the peer-reported endpoint count against table bounds in A2DP stream endpoint discovery. A bonded peer can send an AVDTP DISCOVER response with more endpoints than the fixed table holds, causing out-of-bounds writes that corrupt adjacent static...
UBUNTU-CVE-2026-19774
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerabi...
CVE-2026-19774
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerabi...
CVE-2026-19774
A flaw was found in BlueZ. This vulnerability, a stack-based buffer overflow in the Advanced Audio Distribution Profile A2DP stack, allows a network-adjacent attacker to execute arbitrary code. By pairing a malicious Bluetooth device with the target system, an attacker can exploit improper...
CVE-2026-19774
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...
DEBIAN-CVE-2026-19774
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...
EUVD-2026-79131
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...
CVE-2026-19774 BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...
CVE-2026-19774 BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...
CVE-2026-19774
BlueZ A2DP Stack-based Buffer Overflow allows remote code execution as root on affected installations of the Linux Bluetooth protocol stack. The flaw resides in the handling of stream endpoints , where user-supplied data is copied to a fixed-length stack-based buffer without proper length validat...
CVE-2025-36911_scan
Escáner CVE-2025-36911 Prueba conexiones L2CAP BR/EDR no autenticadas a PSMs de audio A2DP/AVRCP y detecta el servicio Fast Pair GFPS en BLE. Requisitos Linux BlueZ instalado y el servicio bluetooth activo para la funcionalidad BLE. Adaptador Bluetooth habilitado bluetoothctl power on. SO basado ...
CVE-2026-45515
In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-73997
In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45515
CVE-2026-45515 affects the Android A2DP vendor Opus decoder (a2dp_vendor_opus_decoder.cc), where a heap buffer overflow in the a2dp_vendor_opus_decoder_decode_packet function allows an out-of-bounds write. This can lead to local escalation of privilege with no additional execution privileges requ...
PT-2026-81075
Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description A stack-based buffer overflow exists in the A2DP Advanced Audio Distribution Profile component of the BlueZ Bluetooth stack. This flaw allows for remote code execution. Recommendations At the...
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the...
CVE-2026-16473
A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory. Mitigation...