SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80185

MEDIUM · CVSS 5.7 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-08-25 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

A type confusion vulnerability in the SDP XML parser of BlueZ can be exploited through a crafted nested ServiceRecord, leading to a local denial of service by crashing the bluetoothd service. This issue affects unspecified products utilizing BlueZ, and organizations relying on Bluetooth functionality should prioritize patching to prevent potential disruptions.

CVE
CVE-2026-80185
Severity
MEDIUM
CVSS
5.7
EPSS
0.24%

Original NVD Description

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd.