CVE-2026-80186

Name of the Vulnerable Software and Affected Versions BlueZ (affected versions not specified)

Description A stack-based buffer overflow occurs in the Linux Bluetooth protocol stack when processing an Extended Inquiry Response (EIR) packet. A remote attacker within Bluetooth radio range can trigger this issue during Bluetooth discovery by sending a specially crafted packet, which affects the name2utf8() function. This can result in a Denial of Service (DoS) by crashing the bluetoothd service or potentially allow for arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.