132 matches found
CVE-2026-45515
A heap buffer overflow exists in the a2dp_vendor_opus_decoder_decode_packet function within a2dp_vendor_opus_decoder.cc . This vulnerability results in a possible out of bounds write , which could enable local escalation of privilege without requiring additional execution privileges or user inter...
EUVD-2026-73997
In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88235
In a2dp vendor opus decoder decode packet of a2dp vendor opus decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-79377
A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...
PT-2026-87073
A heap overflow in the a2dp decoder sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...
PT-2026-81075
Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description A stack-based buffer overflow exists in the A2DP Advanced Audio Distribution Profile component of the BlueZ Bluetooth stack. This flaw allows for remote code execution. Recommendations At the...
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the...
CVE-2026-16473
A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory. Mitigation...
EUVD-2018-8115
Malware in sbrugna...
EUVD-2020-1728
Malware in sbrugna...
EUVD-2025-23800
Malicious code in bioql PyPI...
EUVD-2023-25120
Malicious code in bioql PyPI...
EUVD-2022-36311
Malicious code in bioql PyPI...
EUVD-2021-3618
Malicious code in bioql PyPI...
EUVD-2022-43778
Malicious code in bioql PyPI...
CVE-2025-21474
Memory corruption while processing commands from A2dp sink command queue...
CVE-2025-21474
Memory corruption while processing commands from A2dp sink command queue...
CVE-2025-21474 Use After Free in BTHOST
Memory corruption while processing commands from A2dp sink command queue...
CVE-2025-21474
CVE-2025-21474 describes a memory corruption issue in Qualcomm chipsets triggered while processing commands from the A2dp sink command queue. The root cause is related to memory handling during queue processing, with the CVSSv3.1 base metrics indicating HIGH impact on confidentiality, integrity, ...
