ZDI-26-589
HIGH 7.1
Published
Aug 24, 2026
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
BlueZ
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1.