CVE-2026-101887

Name of the Vulnerable Software and Affected Versions BlueALSA (affected versions not specified)

Description A division-by-zero issue exists in the LC3plus sink decoder within the a2dp lc3plus dec thread() function located in a2dp-lc3plus.c. A Bluetooth-adjacent attacker can cause a denial of service by establishing an A2DP source connection and sending a crafted RTP media header where the frame count field is set to zero. This triggers a SIGFPE (floating-point exception), which crashes the daemon on builds compiled with LC3plus support enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.