CVE-2026-80185

Name of the Vulnerable Software and Affected Versions BlueZ version 5.86

Description A type confusion issue exists in sdp-xml.c via the RegisterProfile(ServiceRecord) function. A crafted nested ServiceRecord can corrupt the SDP XML parser stack, causing scalar union data to be treated as a sequence pointer. This allows a local caller to crash bluetoothd, resulting in a local Denial of Service (DoS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.