CyberSecBulletin

BlueKitchen vulnerabilities

We track 2 vulnerabilities in BlueKitchen products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 30, 2026.

2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score

Latest BlueKitchen vulnerabilities

  • 7.3 High severity

    BTstack: Out-of-bounds Read

    CVE-2026-28527BlueKitchen

    BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GET_PLAYER_APPLICATION_SETTING_ATTRIBUTE_TEXT and GET_PLAYER_APPLICATION_SETTING_VALUE_TEXT handlers that allows nearby attackers to read beyond pac

  • 9.8 Critical severity

    bluestack: Buffer Copy without Checking Size of Input

    CVE-2024-40568BlueKitchen

    Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pb_adv_handle_tranaction_cont function in the src/mesh/pb_adv.c component