CVE-2026-19774: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
Other sources
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the stream endpoints. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What must an attacker be able to do before exploitation is possible?
The attacker must be network-adjacent and able to pair a malicious Bluetooth device with the target system. Exploitation also requires user interaction, as reflected in the supplied vector.
What level of access could successful exploitation provide?
Successful exploitation can allow arbitrary code execution in the context of root. The reported impacts include confidentiality, integrity, and availability.
Which component is involved in the vulnerable processing?
The flaw is in BlueZ A2DP handling of stream endpoints. It occurs when insufficiently validated user-supplied length data is copied into a fixed-length stack-based buffer.