CVE-2026-75032

Name of the Vulnerable Software and Affected Versions BlueZ (affected versions not specified)

Description Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile (AVRCP) implementation allows a malicious Bluetooth device within range to cause an out-of-bounds memory read. This issue affects the parse media element() and parse media folder() functions, which can lead to a crash of the bluetoothd daemon, resulting in a Denial of Service (DoS), or potentially expose sensitive heap memory contents. Exploitation requires user interaction to pair with the malicious device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.