Vulnerabilities

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability.

BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability.

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.

BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability.

BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability.

BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability.

BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability.

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.

BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability.

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability.

A vulnerability has been found in Linux Kernel and classified as problematic.

A vulnerability classified as problematic has been found in Linux Kernel.

BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c.

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.

A heap overflow vulnerability was found in bluez in versions prior to 5.63.

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up.

A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48.

An issue was discovered in bluetoothd in BlueZ through 5.48.

BlueZ is a Bluetooth protocol stack for Linux.

An issue was discovered in gatt-database.c in BlueZ 5.61.

The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access.

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c.