Bluez vulnerabilities

Products

• Bluez 40

Newest

• bluez BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-19774 Fix available 7.1 HighSeptember 14, 2026
• bluez BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability CVE-2024-8805 Fix available 8.8 HighNovember 22, 2024
• bluez BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-51596 Fix available 7.1 HighMay 3, 2024
• bluez BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-51594 Fix available 2.6 LowMay 3, 2024
• bluez BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-51592 Fix available 5.4 MediumMay 3, 2024
• bluez BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-51589 Fix available 5.4 MediumMay 3, 2024
• bluez BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-51580 Fix available 5.4 MediumMay 3, 2024
• bluez BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44431 Fix available 7.1 HighMay 3, 2024
• bluez BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-50229 Fix available 7.1 HighJanuary 12, 2024
• bluez BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-50230 Fix available 7.1 HighJanuary 5, 2024
• bluez BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability CVE-2023-27349 Fix available 7.1 HighApril 21, 2023
• bluez, linux kernel +1 more Linux Kernel BlueZ jlink.c jlink_init denial of service CVE-2022-3637 2.6 LowOctober 21, 2022
• bluez, linux kernel +1 more Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference CVE-2022-3563 Fix available 3.5 LowOctober 17, 2022
• bluez, canonical ubuntu linux, debian linux +2 more BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because... CVE-2022-39177 Fix available 8.8 HighSeptember 2, 2022
• bluez, canonical ubuntu linux, debian linux +2 more BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because... CVE-2022-39176 Fix available 8.8 HighSeptember 2, 2022
• bluez, debian linux, fedoraproject fedora +2 more A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with... CVE-2022-0204 Fix available 8.8 HighJanuary 24, 2022
• bluez, debian linux +1 more A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any... CVE-2019-8922 Fix available 8.8 HighNovember 27, 2021
• bluez, debian linux +1 more An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the... CVE-2019-8921 Fix available 6.5 MediumNovember 27, 2021
• bluez, debian linux +1 more Memory leak in BlueZ CVE-2021-41229 Fix available 4.3 MediumNovember 12, 2021
• bluez, debian linux +1 more An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a... CVE-2021-43400 Fix available 9.1 CriticalNovember 4, 2021
• bluez, fedoraproject fedora +1 more bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered... CVE-2021-3658 Fix available 6.5 MediumJuly 28, 2021
• bluez memory contents disclosure in cli_feat_read_cb CVE-2021-3588 Fix available 3.3 LowJune 10, 2021
• bluez, debian linux, redhat enterprise linux +2 more Improper access control in BlueZ may allow an authenticated user to potentially enable... CVE-2021-0129 Fix available 5.7 MediumJune 8, 2021
• bluez, debian linux, opensuse leap +2 more In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared... CVE-2020-27153 Fix available 8.6 HighOctober 15, 2020
• bluez linux - security update CVE-2020-24490 Public exploitFix available 6.5 MediumOctober 14, 2020
• bluez, linux kernel +1 more linux-4.19 - security update CVE-2020-12352 Public exploitFix available 6.5 MediumOctober 14, 2020
• bluez, linux kernel +1 more CVE-2020-12351 does not affect BellSoft software CVE-2020-12351 Public exploitFix available 8.8 HighOctober 14, 2020
• bluez, canonical ubuntu linux, debian linux +1 more +3 more Improper access control in subsystem for BlueZ before version 5.53 may allow an unauthenticated... CVE-2020-0556 Fix available 7.1 HighMarch 12, 2020
• bluez, canonical ubuntu linux +1 more A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth... CVE-2018-10910 Fix available 4.5 MediumJuly 24, 2018
• bluez All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information... CVE-2017-1000250 Public exploitFix available 6.5 MediumSeptember 12, 2017
• bluez Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the... CVE-2016-7837 Fix available 7.8 HighJune 9, 2017
• bluez In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source... CVE-2016-9917 Fix available 7.5 HighDecember 8, 2016
• bluez In BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c"... CVE-2016-9804 Fix available 5.3 MediumDecember 3, 2016
• bluez In BlueZ 5.42, an out-of-bounds read was observed in "le_meta_ev_dump" function in "tools/parser... CVE-2016-9803 Fix available 5.3 MediumDecember 3, 2016
• bluez In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c"... CVE-2016-9802 Fix available 5.3 MediumDecember 3, 2016
• bluez In BlueZ 5.42, a buffer overflow was observed in "set_ext_ctrl" function in "tools/parser/l2cap.c... CVE-2016-9801 Fix available 5.3 MediumDecember 3, 2016
• bluez In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser... CVE-2016-9800 Fix available 5.3 MediumDecember 3, 2016
• bluez In BlueZ 5.42, a buffer overflow was observed in "pklg_read_hci" function in "btsnoop.c" source... CVE-2016-9799 5.3 MediumDecember 3, 2016
• bluez In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c"... CVE-2016-9798 Fix available 5.3 MediumDecember 3, 2016
• bluez In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c"... CVE-2016-9797 Fix available 5.3 MediumDecember 3, 2016
• bluez bluez-libs, bluez-utils, fedoraproject fedora +2 more src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3... CVE-2008-2374 Fix available 7.5 HighJuly 7, 2008