Lucene search
+L

11 matches found

NVD
NVD
added 2026/07/11 5:16 p.m.10 views

CVE-2026-10660

The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bapbroadcastassistant.c reassembled remote Broadcast Receive State data into a single file-static netbufsimple attbuf, BTATTMAXATTRIBUTELEN = 512 bytes shared by all connection instances, while the BUSY flag, long-read...

6.4CVSS0.00159EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/07/11 5:0 p.m.7 views

CVE-2026-10660 Shared reassembly buffer in Bluetooth BAP Broadcast Assistant enables cross-connection memory corruption

The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bapbroadcastassistant.c reassembled remote Broadcast Receive State data into a single file-static netbufsimple attbuf, BTATTMAXATTRIBUTELEN = 512 bytes shared by all connection instances, while the BUSY flag, long-read...

6.4CVSS6.2AI score0.00159EPSS
Exploits0References2
CVE
CVE
added 2026/07/11 5:0 p.m.24 views

CVE-2026-10660

The CVE-2026-10660 issue affects the Zephyr Bluetooth BAP Broadcast Assistant GATT client (subsys/bluetooth/audio/bap_broadcast_assistant.c). A single static net_buf_simple buffer (att_buf, BT_ATT_MAX_ATTRIBUTE_LEN = 512) is shared across all connections; per-connection state (BUSY flag, long-rea...

6.4CVSS6.2AI score0.00159EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/07/11 5:0 p.m.37 views

CVE-2026-10660 Shared reassembly buffer in Bluetooth BAP Broadcast Assistant enables cross-connection memory corruption

The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bapbroadcastassistant.c reassembled remote Broadcast Receive State data into a single file-static netbufsimple attbuf, BTATTMAXATTRIBUTELEN = 512 bytes shared by all connection instances, while the BUSY flag, long-read...

6.4CVSS0.00159EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/11 5:0 p.m.3 views

CVE-2026-10660

The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bapbroadcastassistant.c reassembled remote Broadcast Receive State data into a single file-static netbufsimple attbuf, BTATTMAXATTRIBUTELEN = 512 bytes shared by all connection instances, while the BUSY flag, long-read...

6.4CVSS6.2AI score0.00159EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2026/07/11 5:0 p.m.7 views

CVE-2026-10660 Shared reassembly buffer in Bluetooth BAP Broadcast Assistant enables cross-connection memory corruption

The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bapbroadcastassistant.c reassembled remote Broadcast Receive State data into a single file-static netbufsimple attbuf, BTATTMAXATTRIBUTELEN = 512 bytes shared by all connection instances, while the BUSY flag, long-read...

6.4CVSS6.2AI score0.00159EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2024-47060

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00448EPSS
Exploits1References1
CVE
CVE
added 2024/09/13 7:41 p.m.74 views

CVE-2024-5931

CVE-2024-5931 affects Zephyr RTOS, specifically the bap_broadcast_assistant component, due to unchecked user input. Public sources indicate affected version range includes Zephyr 3.6 and earlier; the underlying issue is improper input validation, with potential availability impact (per NVD CVSS: ...

6.5CVSS6.3AI score0.00448EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2024/09/13 7:41 p.m.8 views

CVE-2024-5931 BT: Unchecked user input in bap_broadcast_assistant

BT: Unchecked user input in bapbroadcastassistant...

6.3CVSS5.9AI score0.00448EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/09/13 7:41 p.m.35 views

CVE-2024-5931 BT: Unchecked user input in bap_broadcast_assistant

BT: Unchecked user input in bapbroadcastassistant...

6.3CVSS0.00448EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/09/13 12:0 a.m.7 views

PT-2024-37247

Name of the Vulnerable Software and Affected Versions: bap broadcast assistant affected versions not specified Description: The issue concerns unchecked user input in the bap broadcast assistant, which poses a risk. There is no information provided about the estimated number of potentially affect...

6.5CVSS6.3AI score0.00448EPSS
Exploits1References7
Rows per page
Query Builder