https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:42:40 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:9413 <p><strong>Affected:</strong> AlmaLinux:9: bluez, AlmaLinux:9: bluez-cups, AlmaLinux:9: bluez-libs, AlmaLinux:9: bluez-libs-devel, AlmaLinux:9: bluez-obexd</p> <p>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.</p> <p>Security Fix(es):</p> <p>* bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866) * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596) * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594) * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592) * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589) * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580) * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information,…</p> <p><strong>Affected:</strong> AlmaLinux:9: bluez, AlmaLinux:9: bluez-cups, AlmaLinux:9: bluez-libs, AlmaLinux:9: bluez-libs-devel, AlmaLinux:9: bluez-obexd</p> <p>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.</p> <p>Security Fix(es):</p> <p>* bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866) * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596) * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594) * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592) * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589) * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580) * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230) * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information,…</p> https://cve.radiocsirt.org/vuln/alsa-2024:9413 https://cve.radiocsirt.org/vuln/bdu:2025-16166 bdu:2025-16166 https://cve.radiocsirt.org/vuln/bdu:2025-16166 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/euvd-2026-10580 EUVD-2026-10580 https://cve.radiocsirt.org/vuln/euvd-2026-10580 https://cve.radiocsirt.org/vuln/fkie_cve-2023-51580 <p>BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.</p> <p>The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20852.</p> <p>BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.</p> <p>The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20852.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-51580 https://cve.radiocsirt.org/vuln/ghsa-wpgw-gr5r-5jqv <p>BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.</p> <p>The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20852.</p> <p>BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.</p> <p>The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20852.</p> https://cve.radiocsirt.org/vuln/ghsa-wpgw-gr5r-5jqv https://cve.radiocsirt.org/vuln/gsd-2023-51580 gsd-2023-51580 https://cve.radiocsirt.org/vuln/gsd-2023-51580 https://cve.radiocsirt.org/vuln/msrc_cve-2023-51580 msrc_CVE-2023-51580 https://cve.radiocsirt.org/vuln/msrc_cve-2023-51580 https://cve.radiocsirt.org/vuln/rhsa-2024:9413 <p>BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability bluez: AVRCP stack-based buffer overflow remote code execution vulnerability bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability bluez: OBEX library out-of-bounds read information disclosure vulnerability bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability</p> <p>BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability bluez: AVRCP stack-based buffer overflow remote code execution vulnerability bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability bluez: OBEX library out-of-bounds read information disclosure vulnerability bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2024:9413 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-51580 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: bluez, Ubuntu:Pro:18.04:LTS: bluez, Ubuntu:20.04:LTS: bluez, Ubuntu:22.04:LTS: bluez, Ubuntu:24.04:LTS: bluez, Ubuntu:25.10: bluez, Ubuntu:26.04:LTS: bluez</p> <p>BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device. The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20852.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: bluez, Ubuntu:Pro:18.04:LTS: bluez, Ubuntu:20.04:LTS: bluez, Ubuntu:22.04:LTS: bluez, Ubuntu:24.04:LTS: bluez, Ubuntu:25.10: bluez, Ubuntu:26.04:LTS: bluez</p> <p>BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device. The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20852.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-51580 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3209 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in bluez ausnutzen, um beliebigen Programmcode auszuführen und Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in bluez ausnutzen, um beliebigen Programmcode auszuführen und Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3209