# BlueZ. Every CVE that names BlueZ among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-19774.md) `CVE-2026-19774` · CVE record: BlueZ BlueZ · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-8805.md) `CVE-2024-8805` · CVE record: BlueZ BlueZ · CVSS 8.8 High · Not analysed yet · Published 22 Nov 2024 · Tags: Broken access control - [BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-51596.md) `CVE-2023-51596` · CVE record: BlueZ BlueZ · CVSS 7.1 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-51594.md) `CVE-2023-51594` · CVE record: BlueZ BlueZ · CVSS 2.6 Low · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-51592.md) `CVE-2023-51592` · CVE record: BlueZ BlueZ · CVSS 5.4 Medium · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-51589.md) `CVE-2023-51589` · CVE record: BlueZ BlueZ · CVSS 5.4 Medium · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-51580.md) `CVE-2023-51580` · CVE record: BlueZ BlueZ · CVSS 5.4 Medium · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-50230.md) `CVE-2023-50230` · CVE record: BlueZ BlueZ · CVSS 7.1 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-50229.md) `CVE-2023-50229` · CVE record: BlueZ BlueZ · CVSS 7.1 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-44431.md) `CVE-2023-44431` · CVE record: BlueZ BlueZ · CVSS 7.1 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-27349.md) `CVE-2023-27349` · CVE record: BlueZ BlueZ · CVSS 7.1 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-129 - [Buffer overflow in bluez](https://agentprime.io/advisories/CVE-2022-0204.md) `CVE-2022-0204` · CVE record: bluez · CVSS 8.8 High · Not analysed yet · Published 9 Mar 2022 · Tags: Memory corruption - [Incorrect authorization in bluez](https://agentprime.io/advisories/CVE-2021-3658.md) `CVE-2021-3658` · CVE record: bluez · CVSS 6.5 Medium · Not analysed yet · Published 2 Mar 2022 · Tags: Broken access control - [Memory leak in BlueZ](https://agentprime.io/advisories/CVE-2021-41229.md) `CVE-2021-41229` · CVE record: bluez bluez · CVSS 4.3 Medium · Not analysed yet · Published 12 Nov 2021 · Tags: Denial of service - [memory contents disclosure in cli_feat_read_cb](https://agentprime.io/advisories/CVE-2021-3588.md) `CVE-2021-3588` · CVE record: BlueZ BlueZ · CVSS 3.3 Low · Not analysed yet · Published 10 Jun 2021 · Tags: Memory corruption - [BlueZ: Improper access control in BlueZ may allow an authenticated user to potentially enable…](https://agentprime.io/advisories/CVE-2021-0129.md) `CVE-2021-0129` · CVE record: BlueZ · No CVSS score · Not analysed yet · Published 9 Jun 2021 - [BlueZ: Improper access control in BlueZ may allow an unauthenticated user to potentially enable…](https://agentprime.io/advisories/CVE-2020-12352.md) `CVE-2020-12352` · CVE record: BlueZ · No CVSS score · Not analysed yet · Published 23 Nov 2020 - [BlueZ: Improper input validation in BlueZ may allow an unauthenticated user to potentially…](https://agentprime.io/advisories/CVE-2020-12351.md) `CVE-2020-12351` · CVE record: BlueZ · No CVSS score · Not analysed yet · Published 23 Nov 2020 - [Incorrect authorization in bluez](https://agentprime.io/advisories/CVE-2018-10910.md) `CVE-2018-10910` · CVE record: The Bluez Project bluez · CVSS 4.5 Medium · Not analysed yet · Published 28 Jan 2019 · Tags: Broken access control - [BlueZ: Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code…](https://agentprime.io/advisories/CVE-2016-7837.md) `CVE-2016-7837` · CVE record: BlueZ Project BlueZ · No CVSS score · Not analysed yet · Published 9 Jun 2017 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .