USN-8908-2: BlueZ regression

USN-8908-1 fixed vulnerabilities in BlueZ. Unfortunately, that update introduced a regression in the A2DP profile: cached remote stream endpoints were no longer loaded at startup, which could cause Bluetooth audio devices to fail to reconnect automatically or to fall back to low-quality audio...

USN-8908-1: BlueZ vulnerabilities

Michael Bommarito discovered that BlueZ incorrectly handled codec capability storage in the A2DP profile. An attacker could possibly use this issue to cause a stack buffer overflow, resulting in a denial of service or arbitrary code execution. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22....

PT-2026-94135

Michael Bommarito discovered that BlueZ incorrectly handled codec capability storage in the A2DP profile. An attacker could possibly use this issue to cause a stack buffer overflow, resulting in a denial of service or arbitrary code execution. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22....

ROS-20220628-02

A vulnerability in the Bluetooth protocol stack for Linux BlueZ is related to insufficient validation of user input during A2DP profile processing. user input during A2DP profile processing. Exploitation of the vulnerability could allow an attacker, remotely, transmit specially crafted data to th...

PT-2022-3343

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description The issue is related to insufficient input validation when handling the A2DP profile in the Bluetooth protocol stack for Linux. This can be exploited by a remote attacker using specially crafte...

PT-2022-37572

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description The issue is related to incorrect validation of certain capabilities and lengths when handling the A2DP profile. A remote attacker could exploit this to cause BlueZ to crash, resulting in a...

USN-5481-1 bluez vulnerabilities

It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code...