Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: BlueKitchen GmbH Component: Btstack Clear all filters
TI-2026-22788 CVE-2026-28528 · GHSA-g6wp-9j53-v66x

BlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined Behavior

Priority LOW 10

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GET_FOLDER_ITEMS handler that fails to validate packet boundaries and attribute count data.

CVSS 4.0LOW 2.1 Adjacent network No auth User interaction EPSS 0.00141 Published 2026-03-30 Fixed in 1.8.1 CWE-125
TI-2026-22787 CVE-2026-28527 · GHSA-x9fm-645r-6855

BlueKitchen BTstack < 1.8.1 AVRCP Controller GET_PLAYER_APPLICATION_SETTING_*_TEXT Handlers OOB Read

Priority LOW 10

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GET_PLAYER_APPLICATION_SETTING_ATTRIBUTE_TEXT and GET_PLAYER_APPLICATION_SETTING_VALUE_TEXT handlers that al…

CVSS 4.0LOW 2.1 Adjacent network No auth User interaction EPSS 0.00165 Published 2026-03-30 Fixed in 1.8.1 CWE-125
TI-2026-22786 CVE-2026-28526 · GHSA-6m8p-57vw-28gv

BlueKitchen BTstack < 1.8.1 AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_* Handlers OOB Read

Priority LOW 10

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_ATTRIBUTES and LIST_PLAYER_APPLICATION_SETTING_VALUES handlers that allows a…

CVSS 4.0LOW 2.1 Adjacent network No auth User interaction EPSS 0.0015 Published 2026-03-30 Fixed in 1.8.1 CWE-125