These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A BlueZ A2DP stack-based buffer overflow vulnerability allows network-adjacent attackers to potentially execute arbitrary code on affected installations. The issue exists within the handling of stream endpoints and results from the lack of proper validation of user-supplied data. Exploitation requires pairing a malicious Bluetooth device with the target system.
A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory. The vulnerability affects systems using the BlueZ SBC codec, particularly those streaming Bluetooth audio. Users should [truncated]