BlueZ vulnerabilities
We track 8 vulnerabilities in BlueZ products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
Latest BlueZ vulnerabilities
- 7.1 High severity
BlueZ: Stack-based Buffer Overflow
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetoo
- 8.8 High severity
BlueZ: Improper Access Control
BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerabi
- 7.1 High severity
BlueZ: Heap-based Buffer Overflow
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vuln
- 8.0 High severity
BlueZ: Heap-based Buffer Overflow
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vuln
- 8.0 High severity
BlueZ: Heap-based Buffer Overflow
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vuln
- 8.0 High severity
BlueZ: Stack-based Buffer Overflow
BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit
- 8.0 High severity
BlueZ: Improper Validation of Array Index
BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to e
- 8.8 High severity
bluez: Integer Overflow or Wraparound
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.