Vulnerabilidades en BlueZ
13 resultadosAnálisis Vexday
BlueZ acumula 11 vulnerabilidades catalogadas, nenhuma delas em exploração ativa ou com severidade crítica, o que indica risco moderado e controlável. A fraqueza predominante é leitura fora dos limites (CWE-125), típica de erros de memória em código C/C++. Ausência de publicações recentes sugere que o panorama de risco está estabilizado, sem novos problemas emergentes.
CVE-2023-50229HIGHBlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 2.3%CVE-2024-8805HIGHBlueZ HID over GATT Profile Improper Access Control Remote Code Execution VulnerabilityEPSS 2.0%CVE-2023-44431HIGHBlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.6%CVE-2023-51596HIGHBlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.5%CVE-2023-50230HIGHBlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.5%CVE-2023-27349HIGHBlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution VulnerabilityEPSS 1.4%CVE-2021-41229MEDIUMMemory leak in BlueZEPSS 1.2%CVE-2023-51580MEDIUMBlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.0%CVE-2023-51594LOWBlueZ OBEX Library Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.9%CVE-2023-51589MEDIUMBlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.8%CVE-2023-51592MEDIUMBlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.8%CVE-2021-3588LOWmemory contents disclosure in cli_feat_read_cbEPSS 0.4%CVE-2026-19774HIGHBlueZ A2DP Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%