CVE-2026-24076: Buffer Copy Without Checking Size of Input in Bluetooth HOST

Published Aug 4, 2026

Updated

Memory Corruption when processing registry values with incorrect types using a direct query method.

Event History

Aug 4, 2026

CVE Published

via MITRE·03:07 PM

Data Sourced

via MITRE·03:07 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:16 PM

DescriptionSeverityWeakness

The severity of CVE-2026-24076 is medium with a score of 6.7.

CVE-2026-24076 is a buffer copy without checking the size of input vulnerability in Bluetooth HOST.

CVE-2026-24076 can exploit memory corruption by processing registry values with incorrect types using a direct query method.

Organizations can mitigate CVE-2026-24076 by ensuring proper validation of input sizes when processing registry values.

CVE-2026-24076 is associated with Bluetooth HOST implementations that utilize registry values.