Debian/bluez: medium 5.7
BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated
Action: Upgrade bluez to 5.87-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.87-3 | - |
Fixed versions
| 5.87-3 |
Sources
- osv: DEBIAN-CVE-2026-80185#Debian:14/bluez
- https://security-tracker.debian.org/tracker/CVE-2026-80185
published · modified · JSON