CVE-2026-79377

A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware (v3.x and earlier) allows a remote attacker to trigger a Denial of Service by sending a crafted L2CAP packet . The CVSS 3.1 score is 7.5 (High) , reflecting a network-based attack req...

CVE-2026-79376

An issue in the l2caphandledata function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

CVE-2026-79376

CVE-2026-79376 affects the l2cap_handle_data() function in Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier. An attacker can trigger a Denial of Service by sending a crafted L2CAP packet. The CVSS 3.1 score is 8.8 (HIGH) with an adjacent-network attack vector, no privileges requir...

CVE-2026-79377

A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

EUVD-2026-72777

A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

CVE-2025-36911_scan

CVE-2025-36911 スキャナ 未認証のBR/EDR L2CAP接続をオーディオPSM（A2DP/AVRCP）に対してテストし、BLE上のFast Pairサービス（GFPS）を検出します。 必要条件（Linux） BlueZがインストールされ、BLE機能のためにbluetoothサービスがアクティブであること。 Bluetoothアダプターが有効であること（bluetoothctl power on）。 DebianベースのOS root@kitploit: sudo apt update sudo apt install bluez bluez-tools sudo...

BadBlue

BadBlue Windows CVE-2024-21306 BadBlue の実装 DuckyScript 使用 認証なしピアリングによるコード実行 HID キーボード使用 これは marcnewlin が発見した CVE の実装です そして BlueDucky からのコードも一部使用しています はじめに BadBlue は Bluetooth デバイスの脆弱性を悪用するための強力なツールです。このスクリプトを実行すると、以下のことが可能です: 1. 以前ペアリングしたが現在は見えなくなっている、Bluetooth が有効なデバイスを読み込みます。 2...

CVE-2017-0541

CVE-2017-0541のPoCと脆弱性分析...

MiracleLinux 9 : kernel-5.14.0-687.29.1.el9_8 (AXSA:2026-1758:73)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1758:73 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: scsi: core: Wake up the error handler when final...

The vulnerability of the l2cap_ecred_reconf_rsp() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2capecredreconfrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

CVE-2021-47996

creationtimestamp| type| source ---|---|--- 2026-08-25 18:52:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwii2nyif2w 2026-09-02 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujx7k3bo523...

The vulnerability of the l2cap_ecred_conn_req() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2capecredconnreq function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerabilities of the functions l2cap_disconnect_req() and l2cap_disconnect_rsp() in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions l2capdisconnectreq and l2capdisconnectrsp in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem are related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting these vulnerabilities coul...

The vulnerability of the l2cap_information_rsp() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the l2capinformationrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the l2cap_ecred_conn_req() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to access protected information or cause service failures.

The vulnerability of the l2capecredconnreq function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fixed a memory leak in vhciwrite Syzkaller reported a memory leak as follows: ==================================== BUG: Memory leak Unreferenced object 0xffff88810d81ac00 size 240: ... Hex dump first 32 bytes: 0...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: L2CAP: Fixed use-after-free issue Fixed a potential use-after-free in l2caplecommandrej...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

A vulnerability classified as critical was discovered in the Linux kernel. The vulnerability affects the function l2capreassemblesdu in the file net/bluetooth/l2capcore.c of the Bluetooth component. This vulnerability stems from improper memory management, leading to an attempt to reuse freed...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In hcievent, there is a callback for call disconnect that is called before the connection is deleted. In hcicsdisconnect, we call hciconndel even if the disconnection fails. ISO, L2CAP, and SCO connections refer to...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A issue was discovered in the Linux kernel through version 6.0.10. In the l2capconfigreq function within net/bluetooth/l2capcore.c, there is an integer wraparound occurring when processing L2CAPCONFREQ packets...