BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GET_FOLDER_ITEMS handler that fails to validate packet boundaries and attribute count data.
CVSS 4.0LOW 2.1·Adjacent network·No auth·User interaction·EPSS 0.00141·Published 2026-03-30·Fixed in 1.8.1CWE-125
BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GET_PLAYER_APPLICATION_SETTING_ATTRIBUTE_TEXT and GET_PLAYER_APPLICATION_SETTING_VALUE_TEXT handlers that al…
CVSS 4.0LOW 2.1·Adjacent network·No auth·User interaction·EPSS 0.00165·Published 2026-03-30·Fixed in 1.8.1CWE-125
BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_ATTRIBUTES and LIST_PLAYER_APPLICATION_SETTING_VALUES handlers that allows a…
CVSS 4.0LOW 2.1·Adjacent network·No auth·User interaction·EPSS 0.0015·Published 2026-03-30·Fixed in 1.8.1CWE-125