Re: [Security] Patch for stack buffer overflow and heap OOB read in avrcp.c
Bastien Nocera <[email protected]>
| Newsgroups | org.kernel.vger.linux-bluetooth |
|---|---|
| Message-ID | <[email protected]> |
Hey Nathan, On Wed, 2026-07-22 at 19:53 +0200, nathan auvray wrote: > Hi, > > Here is a 2-patch series fixing two security vulnerabilities in AVRCP > profile response handling (profiles/audio/avrcp.c): > > 1. Fix stack buffer overflow in avrcp_list_player_attributes_rsp This was already reported privately before this patch was sent, and more comprehensive patches will soon be made public. > 2. Fix heap out-of-bounds read in parse_media_element This was already discussed and fixed upstream: https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=bd8989620ed6e80755f06cfdb18f5b4a3913493c In the future, please use either the security advisories functionality on GitHub to report the security issues privately: https://github.com/bluez/bluez/security/advisories or email invididual patches with the [BlueZ] prefix, following standard kernel patch submissions, to report them publicly: https://www.kernel.org/doc/html/v7.0/process/submitting-patches.html Regards > > Best regards, > Rapido =)