BlueZ

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of se…

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c.

BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability.

A heap overflow vulnerability was found in bluez in versions prior to 5.63.

An issue was discovered in gatt-database.c in BlueZ 5.61.

A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48.

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.

BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c.

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.

BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability.

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability.

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory.

In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source file.

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.

Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability.

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access

BlueZ is a Bluetooth protocol stack for Linux.

An issue was discovered in bluetoothd in BlueZ through 5.48.

In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file.

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up.

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file.

In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c" source file.