CVE-2026-28528 in BlueKitchen BTstack

요약 (영어)

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GET_FOLDER_ITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connection can exploit insufficient bounds checking on the attr_id parameter to cause crashes and corrupt attribute bitmap state.

책임이 있는

VulnCheck

예약하다

2026. 02. 27.

공개

2026. 03. 30.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
354193	BlueKitchen BTstack AVRCP Browsing Target 정보 공개	125	정의되지 않음	공식 수정	CVE-2026-28528