132 matches found
PT-2025-32129 · A2Dp · A2Dp
Name of the Vulnerable Software and Affected Versions: versions prior to 2025-21474 Description: A memory corruption issue exists while processing commands from the A2dp sink command queue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
CVE-2025-21474: Use After Free
Memory corruption while processing commands from A2dp sink command queue...
CVE-2023-20952
In A2DPBuildCodecHeaderSbc of a2dpsbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...
CVE-2022-20552
In btifa2dpsinkcommandready of btifa2dpsink.cc, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Andro...
CVE-2018-16263
The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...
CVE-2022-33268
Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2022-40503
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming...
ASB-A-287184435
In sdpucompareuuidwithattr of sdputils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40078
In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2023-27252 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds write due to a heap buffer overflow in the a2dp vendor opus decoder decode packet function of a2dp vendor opus decoder.cc. This could le...
ASB-A-275626001
In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-35387
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability...
CVE-2023-35387
CVE-2023-35387 affects the Windows Bluetooth A2DP driver, described as an Elevation of Privilege vulnerability. The CVSSv3.1 metrics indicate an adjacent attack vector, no privileges required, low attack complexity, user interaction required, and a CHANGED scope with HIGH impacts to confidentiali...
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
...
CVE-2023-35387: Integer Underflow (Wrap or Wraparound)
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability...
Microsoft Windows Bluetooth A2DP driver security vulnerability
Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in the Microsoft Windows Bluetooth A2DP driver. An attacker could exploit the vulnerability to elevate privileges. The following products and versions...
KB5029263: Windows 11 version 22H2 Security Update (August 2023)
The remote Windows host is missing security update 5029263. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...
KB5029308: Windows Server 2012 Security Update (August 2023)
The remote Windows host is missing security update 5029308. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...