{"action":"Upgrade bluez to 5.50-r5 or later.","affected":[{"fixed":"5.50-r5","introduced":"0"}],"component":"bluez","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.10","exploited":false,"fixed_versions":["5.50-r5"],"id":"tcs_01M5NCH9CD2VMC9AW19JA9V26M","modified_at":"2026-10-26T11:17:55.160245992Z","published_at":"2020-10-15T03:15:12.120Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2020-27153","https://security.alpinelinux.org/vuln/CVE-2020-27153"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2020-27153","url":"https://osv.dev/vulnerability/ALPINE-CVE-2020-27153"}],"summary":"In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service"}