CVE-2026-93015highCWE-1284CWE-787

CVE-2026-93015: falha de alta gravidade em BlueKitchen GmbH BTstack

BlueKitchen BTstack through 1.8.2 A2DP SEP Discovery Out-of-Bounds Write

Publicada em

Seguir esta CVE+ Monitorar BTstack

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7epss 0.4%
BlueKitchen BTstack through 1.8.2 fails to validate the peer-reported endpoint count against table bounds in A2DP stream endpoint discovery. A bonded peer can send an AVDTP DISCOVER response with more endpoints than the fixed table holds, causing out-of-bounds writes that corrupt adjacent static objects and crash the process or sever event delivery.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Produtos afetados
BlueKitchen GmbH · BTstack
CVEs relacionadas — BlueKitchen GmbH BTstack

No mesmo produto, das mais perigosas para as menos.

CVE-2026-28527LOWBlueKitchen BTstack < 1.8.1 AVRCP Controller GET_PLAYER_APPLICATION_SETTING_*_TEXT Handlers OOB ReadEPSS 0.2%CVE-2026-28526LOWBlueKitchen BTstack < 1.8.1 AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_* Handlers OOB ReadEPSS 0.1%CVE-2026-28528LOWBlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined BehaviorEPSS 0.1%