USN-5481-1
bluez vulnerabilities
It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code.
What each source reports
OSV No score
bluez vulnerabilities
It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-5481-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bluezUbuntu:18.04:LTS |
before 5.48-0ubuntu3.9, plus listed versions 5.46-0ubuntu35.46-0ubuntu45.48-0ubuntu35.48-0ubuntu3.15.48-0ubuntu3.2 Show 6 moreShow less5.48-0ubuntu3.35.48-0ubuntu3.45.48-0ubuntu3.55.48-0ubuntu3.65.48-0ubuntu3.75.48-0ubuntu3.8 |
5.48-0ubuntu3.9 |
bluezUbuntu:20.04:LTS |
before 5.53-0ubuntu3.6, plus listed versions 5.50-0ubuntu45.51-0ubuntu15.51-0ubuntu25.52-0ubuntu15.52-0ubuntu2 Show 8 moreShow less5.53-0ubuntu15.53-0ubuntu25.53-0ubuntu35.53-0ubuntu3.15.53-0ubuntu3.25.53-0ubuntu3.35.53-0ubuntu3.45.53-0ubuntu3.5 |
5.53-0ubuntu3.6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-5481-1 is a vulnerability with no CVSS score yet in bluez, published June 15, 2022. No source lists public exploit code. Fixed in bluez 5.48-0ubuntu3.9.