CVE-2026-80186

Published: Aug 25, 2026Modified: Aug 28, 2026

7.6

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Exploitability: 2.8 / Impact: 4.7

Source: secalert@redhat.com (Secondary)

Description

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response (EIR) packet that causes a buffer overflow when the target device performs Bluetooth discovery. This vulnerability can lead to a Denial of Service (DoS) by crashing the bluetoothd service and may allow for arbitrary code execution.

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (3)

https://access.redhat.com/security/cve/CVE-2026-80186

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2524132

Source: secalert@redhat.com

https://github.com/bluez/bluez/security/advisories/GHSA-68h6-5qgp-3975

Source: secalert@redhat.com

Timeline

No history available yet.