BL
Vendor
BlueZ
40
CVEs
0
On KEV
0
New 30D
Products
BL9.1
BlueZ
BlueZ
38 CVEs0 on KEV0 new
BL9.8
Bluez-libs
Bluez
1 CVEs0 on KEV0 new
BL9.8
Bluez-utils
Bluez
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-19774 | BL BlueZ BlueZ | 7.1 | Sep 15 | BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2024-8805 | BL Bluez Bluez | 8.8 | Nov 22 | BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability |
| CVE-2023-51596 | BL Bluez Bluez | 7.1 | May 3 | BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2023-51594 | BL Bluez Bluez | 5.7 | May 3 | BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2023-51592 | BL Bluez Bluez | 5.7 | May 3 | BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2023-51589 | BL Bluez Bluez | 5.7 | May 3 | BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2023-51580 | BL Bluez Bluez | 5.7 | May 3 | BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2023-50230 | BL Bluez Bluez | 8.0 | May 3 | BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2023-50229 | BL Bluez Bluez | 8.0 | May 3 | BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2023-44431 | BL Bluez Bluez | 8.0 | May 3 | BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2023-27349 | BL Bluez Bluez | 8.0 | May 3 | BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability |
| CVE-2022-3637 | BL Bluez Bluez | 5.5 | Oct 21 | Linux Kernel BlueZ jlink.c jlink_init denial of service |
| CVE-2022-3563 | BL Bluez Bluez | 5.7 | Oct 17 | Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference |
| CVE-2022-39177 | BL Bluez Bluez | 8.8 | Sep 2 | BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c |
| CVE-2022-39176 | BL Bluez Bluez | 8.8 | Sep 2 | BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len |
| CVE-2022-0204 | BL Bluez Bluez | 8.8 | Mar 10 | A heap overflow vulnerability was found in bluez in versions prior to 5.63 |
| CVE-2021-3658 | BL Bluez Bluez | 6.5 | Mar 2 | bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up |
| CVE-2019-8922 | BL Bluez Bluez | 8.8 | Nov 29 | A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48 |
| CVE-2019-8921 | BL Bluez Bluez | 6.5 | Nov 29 | An issue was discovered in bluetoothd in BlueZ through 5.48 |
| CVE-2021-41229 | BL Bluez Bluez | 6.5 | Nov 12 | BlueZ is a Bluetooth protocol stack for Linux |
| CVE-2021-43400 | BL Bluez Bluez | 9.1 | Nov 4 | An issue was discovered in gatt-database.c in BlueZ 5.61 |
| CVE-2021-3588 | BL Bluez Bluez | 3.3 | Jun 10 | The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading |
| CVE-2021-0129 | BL Bluez Bluez | 5.7 | Jun 9 | Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access |
| CVE-2020-24490 | BL Bluez Bluez | 6.5 | Feb 2 | Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access |
| CVE-2020-27153 | BL Bluez Bluez | 8.6 | Oct 15 | In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c |
| CVE-2020-0556 | BL Bluez Bluez | 7.1 | Mar 12 | Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via… |
| CVE-2018-10910 | BL Bluez Bluez | 3.3 | Jan 28 | A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system |
| CVE-2017-1000250 | BL Bluez Bluez | 6.5 | Sep 12 | All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information… |
| CVE-2016-7837 | BL Bluez Bluez | 7.8 | Jun 9 | Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities |
| CVE-2016-9917 | BL Bluez Bluez | 7.5 | Dec 8 | In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source file |
| CVE-2016-9804 | BL Bluez Bluez | 5.3 | Dec 3 | In BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c" source file |
| CVE-2016-9803 | BL Bluez Bluez | 5.3 | Dec 3 | In BlueZ 5.42, an out-of-bounds read was observed in "le_meta_ev_dump" function in "tools/parser/hci.c" source file |
| CVE-2016-9802 | BL Bluez Bluez | 5.3 | Dec 3 | In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file |
| CVE-2016-9801 | BL Bluez Bluez | 5.3 | Dec 3 | In BlueZ 5.42, a buffer overflow was observed in "set_ext_ctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file |
| CVE-2016-9800 | BL Bluez Bluez | 5.3 | Dec 3 | In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser/hci.c" source file |
| CVE-2016-9799 | BL Bluez Bluez | 5.3 | Dec 3 | In BlueZ 5.42, a buffer overflow was observed in "pklg_read_hci" function in "btsnoop.c" source file |
| CVE-2016-9798 | BL Bluez Bluez | 5.3 | Dec 3 | In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file |
| CVE-2016-9797 | BL Bluez Bluez | 5.3 | Dec 3 | In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c" source file |
| CVE-2008-2374 | BL Bluez-libs Bluez | 9.8 | Jul 7 | src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows… |