CVE-2026-16473

Name of the Vulnerable Software and Affected Versions sbc library (BlueZ SBC codec) (affected versions not specified)

Description An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This enables an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.