Vulnerabilities (CVE)

Filtered by vendor Bluez Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-3588 1 Bluez 1 Bluez 2021-06-21 2.1 LOW 3.3 LOW
The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.
CVE-2018-10910 2 Bluez, Canonical 2 Bluez, Ubuntu Linux 2019-10-09 2.1 LOW 3.3 LOW
A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.