{"action":"Upgrade bluez to 5.55-1 or later.","affected":[{"fixed":"5.55-1","introduced":"0"}],"component":"bluez","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["5.55-1"],"id":"tcs_01M5NEXXYXG6MVC98F5MSPQG01","modified_at":"2026-09-11T11:02:43.734368356Z","published_at":"2020-10-15T03:15:12.120Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-27153","https://security-tracker.debian.org/tracker/CVE-2020-27153"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-27153#Debian:13/bluez","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-27153"}],"summary":"In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service"}