BlueZ
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 1
en
Verify to analyze this security profile
As of 09/16/2026, BlueZ recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, BlueZ had the most security vulnerabilities in the BlueZ ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-19774BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published09/15/2026 | SeverityHigh |
CVE-2024-8805BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published11/22/2024 | SeverityHigh |
CVE-2023-51596BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published05/03/2024 | SeverityHigh |
CVE-2023-51594BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published05/03/2024 | SeverityLow |
CVE-2023-51592BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published05/03/2024 | SeverityMedium |
CVE-2023-51589BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published05/03/2024 | SeverityMedium |
CVE-2023-51580BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published05/03/2024 | SeverityMedium |
CVE-2023-50230BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published05/03/2024 | SeverityHigh |
CVE-2023-50229BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published05/03/2024 | SeverityHigh |
CVE-2023-44431BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published05/03/2024 | SeverityHigh |
CVE-2023-27349BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productBlueZ | Published05/03/2024 | SeverityHigh |
CVE-2022-3637Linux Kernel BlueZ jlink.c jlink_init denial of service | Exploitation statusNot known exploited | FixNot confirmed | Affected productkernel | Published10/21/2022 | SeverityLow |
CVE-2022-3563Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference | Exploitation statusNot known exploited | FixNot confirmed | Affected productkernel | Published10/17/2022 | SeverityLow |
CVE-2022-39177 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published09/02/2022 | SeverityHigh |
CVE-2022-39176 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published09/02/2022 | SeverityHigh |
CVE-2022-0204 | Exploitation statusNot known exploited | FixNot confirmed | Affected productbluez | Published03/09/2022 | SeverityHigh |
CVE-2021-3658 | Exploitation statusNot known exploited | FixNot confirmed | Affected productbluez | Published03/02/2022 | SeverityMedium |
CVE-2019-8922 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/29/2021 | SeverityHigh |
CVE-2019-8921 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/29/2021 | SeverityMedium |
CVE-2021-41229Memory leak in BlueZ | Exploitation statusNot confirmed | FixNot confirmed | Affected productBlueZ | Published11/12/2021 | SeverityMedium |
CVE-2021-43400 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/04/2021 | SeverityUnknown |
CVE-2021-3588memory contents disclosure in cli_feat_read_cb | Exploitation statusNot confirmed | FixYes | Affected productBlueZ | Published06/10/2021 | SeverityLow |
CVE-2021-0129 | Exploitation statusNot confirmed | FixNot confirmed | Affected productBlueZ | Published06/09/2021 | SeverityUnknown |
CVE-2020-24490 | Exploitation statusNot confirmed | FixNot confirmed | Affected productBlueZ Advisory | Published02/02/2021 | SeverityUnknown |
CVE-2020-27153 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published10/15/2020 | SeverityHigh |
CVE-2020-0556 | Exploitation statusNot confirmed | FixNot confirmed | Affected productBlueZ | Published03/12/2020 | SeverityUnknown |
CVE-2018-10910 | Exploitation statusNot confirmed | FixNot confirmed | Affected productbluez | Published01/28/2019 | SeverityMedium |
CVE-2017-1000250 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/12/2017 | SeverityUnknown |
CVE-2016-7837 | Exploitation statusNot confirmed | FixNot confirmed | Affected productBlueZ | Published06/09/2017 | SeverityUnknown |
CVE-2016-9917 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/08/2016 | SeverityUnknown |
CVE-2016-9798 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/03/2016 | SeverityUnknown |
CVE-2016-9801 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/03/2016 | SeverityUnknown |
CVE-2016-9803 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/03/2016 | SeverityUnknown |
CVE-2016-9797 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/03/2016 | SeverityUnknown |
CVE-2016-9799 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/03/2016 | SeverityUnknown |
CVE-2016-9800 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/03/2016 | SeverityUnknown |
CVE-2016-9802 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/03/2016 | SeverityUnknown |
CVE-2016-9804 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/03/2016 | SeverityUnknown |
CVE-2008-2374 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/07/2008 | SeverityCritical |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan