{"action":"Upgrade bluez to 5.54-1 or later.","affected":[{"fixed":"5.54-1","introduced":"0"}],"component":"bluez","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["5.54-1"],"id":"tcs_01M5NEC9EW884DPQ1593ST7CMQ","modified_at":"2026-09-21T07:03:15.962502848Z","published_at":"2021-11-29T08:15:07.627Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-8922","https://security-tracker.debian.org/tracker/CVE-2019-8922"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-8922#Debian:13/bluez","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-8922"}],"summary":"A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data"}