Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

BlueZ — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in BlueZ, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting the BlueZ Bluetooth protocol stack, a core component of the Linux kernel and userland implementations. The collection compiles known defects in the BlueZ stack, covering historical incidents from the project’s early adoption through the most recently disclosed flaws. Readers can use this resource to track vendor-issued security advisories, analyze the recurring weakness classes within the protocol, and review the product’s complete vulnerability history without navigating individual CVE records.

Vendor: BlueZ Project

CVE ID Title CVSS Severity Published
CVE-2026-19774 BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability CWE-121 - - 2026-09-15
CVE-2024-8805 BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability CWE-284 8.8 - 2024-11-22
CVE-2023-51596 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 8.0 - 2024-05-03
CVE-2023-51594 BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.7 - 2024-05-03
CVE-2023-51592 BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.7 - 2024-05-03
CVE-2023-51589 BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.7 - 2024-05-03
CVE-2023-51580 BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.7 - 2024-05-03
CVE-2023-50230 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 8.0 - 2024-05-03
CVE-2023-50229 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 8.0 - 2024-05-03
CVE-2023-44431 BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability CWE-121 8.0 - 2024-05-03
CVE-2023-27349 BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability CWE-129 8.0 - 2024-05-03
CVE-2022-0204 BlueZ 输入验证错误漏洞 CWE-119 6.5 - 2022-03-09
CVE-2021-3658 bluez 安全漏洞 CWE-863 4.3 - 2022-03-02
CVE-2021-41229 Memory leak in BlueZ CWE-400 4.3 Medium 2021-11-12
CVE-2021-3588 memory contents disclosure in cli_feat_read_cb CWE-788 3.3 Low 2021-06-10
CVE-2021-0129 BlueZ 安全漏洞 5.7 - 2021-06-09
CVE-2020-12352 Linux kernel 信息泄露漏洞 6.5 - 2020-11-23
CVE-2020-12351 Linux kernel 输入验证错误漏洞 8.8 - 2020-11-23
CVE-2020-0556 BlueZ 访问控制错误漏洞 8.3 - 2020-03-12
CVE-2018-10910 Bluez 权限许可和访问控制问题漏洞 CWE-863 4.3 - 2019-01-28
CVE-2016-7837 BlueZ 缓冲区错误漏洞 8.8 - 2017-06-09

All 21 known CVE vulnerabilities affecting BlueZ with full Chinese analysis, references, and POCs where available.