{"id":"CVE-2023-51589","aliases":["ALSA-2024:9413","ALSA-2025:4043","AZL-40244","AZL-40258","CLSA-2025-1763031616","DEBIAN-CVE-2023-51589","EUVD-2023-56301","GHSA-jj24-rmrj-3hr4","MGASA-2025-0115","RHSA-2024:9413","RHSA-2025:4043","RLSA-2024:9413","RLSA-2025:4043","ROOT-OS-DEBIAN-12-CVE-2023-51589","ROOT-OS-DEBIAN-13-CVE-2023-51589","UBUNTU-CVE-2023-51589"],"status":"published","title":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability","description":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.","severity":{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0083,"percentile":0.57823,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2024-05-03T02:15:19Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Root:Debian:12","package":"bluez","fixed_in":["5.66-1+deb12u2.root.io.10","5.66-1+deb12u2.root.io.1","5.66-1+deb12u2.root.io.3","5.66-1+deb12u2.root.io.14","5.66-1+deb12u2.root.io.6","5.66-1+deb12u2.root.io.16","5.66-1+deb12u2.root.io.2","5.66-1+deb12u2.root.io.4","5.66-1+deb12u2.root.io.5","5.66-1+deb12u2.root.io.7","5.66-1+deb12u2.root.io.8","5.66-1+deb12u2.root.io.9","5.66-1+deb12u2.root.io.13","5.66-1+deb12u2.root.io.11","5.66-1+deb12u2.root.io.12","5.66-1+deb12u2.root.io.15","5.66-1+deb12u2.aikido.17","5.66-1+deb12u2.aikido.18","5.66-1+deb12u2.aikido.19"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-bluez","fixed_in":["5.66-1+deb12u2.root.io.10","5.66-1+deb12u2.root.io.1","5.66-1+deb12u2.root.io.3","5.66-1+deb12u2.root.io.14","5.66-1+deb12u2.root.io.6","5.66-1+deb12u2.root.io.16","5.66-1+deb12u2.root.io.2","5.66-1+deb12u2.root.io.4","5.66-1+deb12u2.root.io.5","5.66-1+deb12u2.root.io.7","5.66-1+deb12u2.root.io.8","5.66-1+deb12u2.root.io.9","5.66-1+deb12u2.root.io.13","5.66-1+deb12u2.root.io.11","5.66-1+deb12u2.root.io.12","5.66-1+deb12u2.root.io.15","5.66-1+deb12u2.aikido.17","5.66-1+deb12u2.aikido.18","5.66-1+deb12u2.aikido.19"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"bluez","fixed_in":["5.82-1.1.root.io.4","5.82-1.1.root.io.2","5.82-1.1.root.io.1","5.82-1.1.root.io.3","5.82-1.1.root.io.5","5.82-1.1.aikido.6","5.82-1.1.aikido.7","5.82-1.1.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-bluez","fixed_in":["5.82-1.1.root.io.4","5.82-1.1.root.io.2","5.82-1.1.root.io.1","5.82-1.1.root.io.3","5.82-1.1.root.io.5","5.82-1.1.aikido.6","5.82-1.1.aikido.7","5.82-1.1.aikido.8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-5.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-5.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.63-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.63-8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-mesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.66-1","5.66-1+deb12u1","5.66-1+deb12u2","5.68-1","5.68-2","5.69-1","5.70-1","5.70-1.1","5.70-1.1~exp0","5.71-1","5.73-1","5.73-1.1","5.77-1","5.79-1","5.79-2","5.82-1","5.82-1.1","5.83-1","5.83-1~exp1","5.84-1","5.85-1","5.85-2","5.85-3","5.85-4","5.87-1","5.87-2","5.87-3","5.87-4","5.87-5"]},{"source":"osv","ecosystem":"Debian:13","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.82-1.1","5.83-1","5.83-1~exp1","5.84-1","5.85-1","5.85-2","5.85-3","5.85-4","5.87-1","5.87-2","5.87-3","5.87-4","5.87-5"]},{"source":"osv","ecosystem":"Debian:14","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.82-1.1","5.83-1","5.83-1~exp1","5.84-1","5.85-1","5.85-2","5.85-3","5.85-4","5.87-1","5.87-2","5.87-3","5.87-4","5.87-5"]},{"source":"osv","ecosystem":"Mageia:9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.80-1.mga9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-libs-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-mesh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-libs-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-mesh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-libs-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-mesh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-5.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:Debian:12","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.66-1+deb12u2.root.io.10"},{"fixed":"5.66-1+deb12u2.root.io.1"},{"fixed":"5.66-1+deb12u2.root.io.3"},{"fixed":"5.66-1+deb12u2.root.io.14"},{"fixed":"5.66-1+deb12u2.root.io.6"},{"fixed":"5.66-1+deb12u2.root.io.16"},{"fixed":"5.66-1+deb12u2.root.io.2"},{"fixed":"5.66-1+deb12u2.root.io.4"},{"fixed":"5.66-1+deb12u2.root.io.5"},{"fixed":"5.66-1+deb12u2.root.io.7"},{"fixed":"5.66-1+deb12u2.root.io.8"},{"fixed":"5.66-1+deb12u2.root.io.9"},{"fixed":"5.66-1+deb12u2.root.io.13"},{"fixed":"5.66-1+deb12u2.root.io.11"},{"fixed":"5.66-1+deb12u2.root.io.12"},{"fixed":"5.66-1+deb12u2.root.io.15"},{"fixed":"5.66-1+deb12u2.aikido.17"},{"fixed":"5.66-1+deb12u2.aikido.18"},{"fixed":"5.66-1+deb12u2.aikido.19"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.66-1+deb12u2.root.io.10"},{"fixed":"5.66-1+deb12u2.root.io.1"},{"fixed":"5.66-1+deb12u2.root.io.3"},{"fixed":"5.66-1+deb12u2.root.io.14"},{"fixed":"5.66-1+deb12u2.root.io.6"},{"fixed":"5.66-1+deb12u2.root.io.16"},{"fixed":"5.66-1+deb12u2.root.io.2"},{"fixed":"5.66-1+deb12u2.root.io.4"},{"fixed":"5.66-1+deb12u2.root.io.5"},{"fixed":"5.66-1+deb12u2.root.io.7"},{"fixed":"5.66-1+deb12u2.root.io.8"},{"fixed":"5.66-1+deb12u2.root.io.9"},{"fixed":"5.66-1+deb12u2.root.io.13"},{"fixed":"5.66-1+deb12u2.root.io.11"},{"fixed":"5.66-1+deb12u2.root.io.12"},{"fixed":"5.66-1+deb12u2.root.io.15"},{"fixed":"5.66-1+deb12u2.aikido.17"},{"fixed":"5.66-1+deb12u2.aikido.18"},{"fixed":"5.66-1+deb12u2.aikido.19"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.82-1.1.root.io.4"},{"fixed":"5.82-1.1.root.io.2"},{"fixed":"5.82-1.1.root.io.1"},{"fixed":"5.82-1.1.root.io.3"},{"fixed":"5.82-1.1.root.io.5"},{"fixed":"5.82-1.1.aikido.6"},{"fixed":"5.82-1.1.aikido.7"},{"fixed":"5.82-1.1.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.82-1.1.root.io.4"},{"fixed":"5.82-1.1.root.io.2"},{"fixed":"5.82-1.1.root.io.1"},{"fixed":"5.82-1.1.root.io.3"},{"fixed":"5.82-1.1.root.io.5"},{"fixed":"5.82-1.1.aikido.6"},{"fixed":"5.82-1.1.aikido.7"},{"fixed":"5.82-1.1.aikido.8"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.35-0ubuntu2","5.36-0ubuntu1","5.37-0ubuntu5","5.37-0ubuntu5.1","5.37-0ubuntu5.3","5.37-0ubuntu5.3+esm1","5.37-0ubuntu5.3+esm2","5.37-0ubuntu5.3+esm3","5.37-0ubuntu5.3+esm4","5.37-0ubuntu5.3+esm5","5.37-0ubuntu5.3+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.46-0ubuntu3","5.46-0ubuntu4","5.48-0ubuntu3","5.48-0ubuntu3.1","5.48-0ubuntu3.2","5.48-0ubuntu3.3","5.48-0ubuntu3.4","5.48-0ubuntu3.5","5.48-0ubuntu3.6","5.48-0ubuntu3.7","5.48-0ubuntu3.8","5.48-0ubuntu3.9","5.48-0ubuntu3.9+esm1","5.48-0ubuntu3.9+esm2","5.48-0ubuntu3.9+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.50-0ubuntu4","5.51-0ubuntu1","5.51-0ubuntu2","5.52-0ubuntu1","5.52-0ubuntu2","5.53-0ubuntu1","5.53-0ubuntu2","5.53-0ubuntu3","5.53-0ubuntu3.1","5.53-0ubuntu3.2","5.53-0ubuntu3.3","5.53-0ubuntu3.4","5.53-0ubuntu3.5","5.53-0ubuntu3.6","5.53-0ubuntu3.7","5.53-0ubuntu3.8","5.53-0ubuntu3.9","5.53-0ubuntu3.9+esm1","5.53-0ubuntu3.9+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.60-0ubuntu2","5.62-0ubuntu1","5.62-0ubuntu2","5.63-0ubuntu1","5.63-0ubuntu2","5.64-0ubuntu1","5.64-0ubuntu1.1","5.64-0ubuntu1.3","5.64-0ubuntu1.4","5.64-0ubuntu1.5","5.64-0ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.68-0ubuntu1","5.70-0ubuntu1","5.70-0ubuntu2","5.70-0ubuntu3","5.71-0ubuntu3","5.71-1ubuntu2","5.71-1ubuntu3","5.72-0ubuntu1","5.72-0ubuntu3","5.72-0ubuntu4","5.72-0ubuntu5","5.72-0ubuntu5.1","5.72-0ubuntu5.3","5.72-0ubuntu5.4","5.72-0ubuntu5.5","5.72-0ubuntu5.6","5.72-0ubuntu5.7","5.72-0ubuntu5.8"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.79-2ubuntu1","5.82-1","5.82-1ubuntu1","5.83-1~exp1","5.83-1~exp1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.85-4","5.85-4ubuntu1","5.87-1","5.87-2","5.87-3","5.87-4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.83-1~exp1","5.84-1","5.85-1","5.85-2","5.85-3","5.85-4","5.85-4ubuntu0.1","5.85-4ubuntu0.2","5.85-4ubuntu0.3","5.85-4ubuntu0.4"]}],"products":[{"vendor":"bluez","product":"bluez"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1904/","tags":["x_research-advisory","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51589","tags":["web","advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1904"},{"url":"https://github.com/advisories/GHSA-jj24-rmrj-3hr4"},{"url":"https://access.redhat.com/errata/RHSA-2024:9413","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27349","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44431","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45866","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50229","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50230","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51580","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51589","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51592","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51594","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51596","tags":["report"]},{"url":"https://bugzilla.redhat.com/2253391","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278787","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278945","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278955","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278962","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278965","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278967","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278969","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278972","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278974","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9413.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4043","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-4043.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1763031616.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/51xxx/CVE-2023-51589.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-51589","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0115.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34123","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6KKJVC5RPR5AMR4ZTMHWP7TATS4SY47/","tags":["web"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278974","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9413.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27349","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27349","tags":["advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-386/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44431","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45866","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50229","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50230","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51580","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51580","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51589","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51592","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51592","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51594","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51594","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51596","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51596","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4043.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9413","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:4043","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-51589","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-51589","title":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability","description":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.","status":"published","published":"2024-05-03T02:15:19.369Z","modified":"2024-08-02T22:40:33.852Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:17.48054Z"}],"euvd":[{"id":"EUVD-2023-56301","description":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.","status":"published","published":"2024-05-03T02:15:19Z","modified":"2024-08-02T22:40:33Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T03:26:07.206777Z"}],"ghsa":[{"id":"GHSA-jj24-rmrj-3hr4","title":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure...","description":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.","status":"published","published":"2024-05-03T03:31:07Z","modified":"2024-05-03T03:31:29Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:57:18.288618Z"}],"nvd":[{"id":"CVE-2023-51589","description":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.","status":"published","published":"2024-05-03T03:16:19.23Z","modified":"2026-06-17T06:41:16.62Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:09:15.329996Z"}],"osv":[{"id":"CVE-2023-51589","title":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability","description":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.","status":"published","published":"2024-05-03T02:15:19.369Z","modified":"2026-10-28T02:30:48.144526021Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DEBIAN-CVE-2023-51589","description":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.  The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.","status":"published","published":"2024-05-03T03:16:19.23Z","modified":"2026-10-26T18:02:50.441690892Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"RHSA-2024:9413","title":"Red Hat Security Advisory: bluez security update","status":"published","published":"2024-11-12T18:06:36Z","modified":"2026-08-07T10:16:43Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2025:4043","title":"Red Hat Security Advisory: bluez security update","status":"published","published":"2025-04-24T10:03:51Z","modified":"2026-08-07T10:20:07Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RLSA-2025:4043","title":"Moderate: bluez security update","description":"The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Rocky Enterprise Software Foundation), and pcmcia configuration files. \n\nSecurity Fix(es):\n\n* BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)\n\n* bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:26.98262Z","modified":"2025-07-29T14:59:55.919185Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2023-51589","title":"CVE-2023-51589 in bluez - Patched by Root","description":"Root has patched CVE-2023-51589 in the bluez package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-09-25T09:30:53Z","modified":"2026-09-25T10:15:06.041845182Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2023-51589","title":"CVE-2023-51589 in bluez - Patched by Root","description":"Root has patched CVE-2023-51589 in the bluez package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-09-25T09:34:09Z","modified":"2026-09-25T10:15:06.302573663Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"UBUNTU-CVE-2023-51589","description":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device. The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.","status":"published","published":"2024-05-03T03:16:00Z","modified":"2026-10-17T12:57:21.81844803Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"ALSA-2024:9413","title":"Moderate: bluez security update","description":"The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   \n\nSecurity Fix(es):  \n\n  * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)\n  * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)\n  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596)\n  * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)\n  * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592)\n  * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)\n  * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580)\n  * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)\n  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230)\n  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2024-11-12T00:00:00Z","modified":"2026-10-29T11:31:53.920798667Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:4043","title":"Moderate: bluez security update","description":"The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   \n\nSecurity Fix(es):  \n\n  * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)\n  * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-04-22T00:00:00Z","modified":"2026-10-29T11:02:23.059242406Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"AZL-40244","title":"CVE-2023-51589 affecting package bluez 5.63-6","description":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.","status":"published","published":"2024-05-03T03:16:19Z","modified":"2026-04-21T04:28:57.892102Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-40258","title":"CVE-2023-51589 affecting package bluez 5.63-8","description":"BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.","status":"published","published":"2024-05-03T03:16:19Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"CLSA-2025-1763031616","title":"bluez: Fix of 10 CVEs","description":"- CVE-2023-27349: fix crash while handling unsupported events in avrcp\n- CVE-2023-44431: fix Stack-based buffer overflow and remote code execution\n  vulnerability\n- CVE-2023-45866: restrict HID connections to avoid unauthorized input injection\n- CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone\n  Book Access profile by adding proper validation of user-supplied data length\n  before copying to buffer\n- CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book\n  Access profile to prevent arbitrary code execution by validating user-supplied\n  data length before copying to buffer\n- CVE-2023-51580: validate AVRCP attribute list data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51589: validate AVRCP media element data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51592: validate AVRCP media folder data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51594: validate OBEX protocol parameters to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51596: validate PBAP data length to prevent heap overflow and remote\n  code execution","status":"published","published":"2025-11-13T11:00:20Z","modified":"2026-06-01T00:31:25.253544213Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"MGASA-2025-0115","title":"Updated bluez packages fix security vulnerabilities","description":"BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code\nExecution Vulnerability. (CVE-2023-44431)\nBlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read\nInformation Disclosure Vulnerability. (CVE-2023-51580)\nBlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read\nInformation Disclosure Vulnerability. (CVE-2023-51589)\nBlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read\nInformation Disclosure Vulnerability. (CVE-2023-51592)\nBlueZ OBEX Library Out-Of-Bounds Read Information Disclosure\nVulnerability. (CVE-2023-51594)\nBlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code\nExecution Vulnerability. (CVE-2023-51596)\n","status":"published","published":"2025-03-26T03:43:25Z","modified":"2026-04-16T04:41:07.681955576Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"RLSA-2024:9413","title":"Moderate: bluez security update","description":"The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Rocky Enterprise Software Foundation), and pcmcia configuration files. \n\nSecurity Fix(es):\n\n* bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)\n\n* BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)\n\n* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596)\n\n* bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)\n\n* bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592)\n\n* bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)\n\n* bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580)\n\n* bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)\n\n* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230)\n\n* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.","status":"published","published":"2025-03-17T20:16:43.608626Z","modified":"2026-02-05T13:30:14.532983Z","updated_at":"2026-11-02T15:53:24.923365Z"}]}}