CyberRota Analysis
AI-GeneratedA vulnerability in BlueZ's implementation of the Audio/Video Remote Control Profile (AVRCP) allows a nearby malicious Bluetooth device to exploit insufficient validation of packet length fields, leading to an out-of-bounds memory read. This can cause the bluetoothd daemon to crash, resulting in a Denial of Service (DoS) and potentially exposing sensitive heap memory contents. Organizations using Bluetooth-enabled devices that rely on BlueZ should prioritize addressing this issue to mitigate risks associated with user interaction and potential data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile (AVRCP) implementation allows a malicious Bluetooth device within range to cause an out-of-bounds memory read. This vulnerability, affecting the parse_media_element() and parse_media_folder() functions, can lead to a crash of the bluetoothd daemon, resulting in a Denial of Service (DoS). It could also potentially expose sensitive heap memory contents. Exploitation requires user interaction to pair with the malicious device.