https://seclists.org/oss-sec/2026/q3/498: CVE quest: BlueZ AVRCP Out-of-Bounds ad (CWE-125)
Published Aug 14, 2026
·Updated
Affected Software
1 affected component
BlueZ bluetoothd<bd8989620ed6
Frequently Asked Questions
1
What is the severity of CVE-2026-XXXX?
CVE-2026-XXXX is classified as a medium-severity vulnerability due to the potential for remote exploitation.
2
How do I fix CVE-2026-XXXX?
To fix CVE-2026-XXXX, update to the latest version of BlueZ that includes the vulnerability patch.
3
What systems are affected by CVE-2026-XXXX?
CVE-2026-XXXX affects versions of the BlueZ Bluetooth stack prior to the security update released on August 14, 2026.
4
What are the risks of not addressing CVE-2026-XXXX?
Not addressing CVE-2026-XXXX may allow remote attackers to perform out-of-bounds read operations and potentially disclose sensitive information.
5
What is the nature of CVE-2026-XXXX?
CVE-2026-XXXX is an Out-of-Bounds Read vulnerability that involves improper handling of AVRCP GetFolderItems parsing in BlueZ.