Lucene search
+L

38 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•2 views

CVE-2026-28528: Out-of-bounds Read

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GETFOLDERITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connection can exploit insufficient bounds...

4.6CVSS5.8AI score0.00215EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•24 views

BTstack 安全漏洞

BTstack is an open-source Bluetooth stack developed by BlueKitchen. Versions of BTstack prior to 1.8.1 contained security vulnerabilities. These vulnerabilities stemmed from out-of-bounds read accesses by the AVRCP controller processing program, which could lead to information leaks and system...

7.3CVSS5.8AI score0.00254EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•29 views

PT-2026-29025

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LIST PLAYER APPLICATION SETTING ATTRIBUTES and LIST PLAYER APPLICATION SETTING VALUES handlers that allows attackers to read beyond buffer boundaries. A nearby attacker with a paired...

3.5CVSS6AI score0.00236EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-52934

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.00253EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 7:32 a.m.•15 views

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

9.8CVSS8AI score0.00733EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:23 a.m.•14 views

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

4.3CVSS6.8AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/18 9:15 p.m.•27 views

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

9.8CVSS0.00733EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•4 views

CVE-2024-40568: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

9.8CVSS6.6AI score0.00733EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/18 12:00 a.m.•64 views

CVE-2024-40568

The btstack mesh Bluetooth stack implementation (from BlueKitchen) contains a Buffer Overflow vulnerability in versions prior to v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 . The flaw resides in the pb_adv_handle_tranaction_cont function within the src/mesh/pb_adv.c component, which can allow a re...

9.8CVSS7.6AI score0.00733EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/09/18 12:00 a.m.•16 views

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

8.1AI score0.00733EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/18 12:00 a.m.•17 views

PT-2024-28923 · Unknown · Btstack Mesh

Name of the Vulnerable Software and Affected Versions: btstack mesh versions before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 Description: The issue allows a remote attacker to execute arbitrary code via the pb adv handle tranaction cont function in the src/mesh/pb adv.c component. This is a...

9.8CVSS8.3AI score0.00733EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/09/18 12:00 a.m.•30 views

CVE-2024-40568

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pbadvhandletranactioncont function in the src/mesh/pbadv.c component...

0.00733EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/01 8:15 p.m.•17 views

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

4.3CVSS6.5AI score0.00253EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/01 12:00 a.m.•77 views

CVE-2023-48906

A Stack Overflow vulnerability exists in Btstack version 1.6 and earlier , an open-source implementation of the official BlueKitchen Bluetooth stack. The flaw is caused by crafted input processed by the char_for_nibble function. Exploitation of this vulnerability allows an attacker to trigger a d...

4.3CVSS6.7AI score0.00253EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•20 views

Btstack 安全漏洞

Btstack is a BlueKitchen open source implementation of the official BlueKitchen Bluetooth stack. A security vulnerability exists in Btstack version 1.6 and earlier. An attacker exploited the vulnerability to cause a system denial of service via a specially crafted charfornibble function...

4.3CVSS6.6AI score0.00253EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/04/01 12:00 a.m.•29 views

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

6.7AI score0.00253EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/01 12:00 a.m.•15 views

CVE-2023-48906

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

6.8AI score0.00253EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/01 12:00 a.m.•3 views

CVE-2023-48906: Stack-based Buffer Overflow

Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the charfornibble function...

4.3CVSS5.8AI score0.00253EPSS
SaveExploits0References2
Rows per page
Query Builder