Skip to content
OpenAdvisories
High USN-7265-1 2 CVEs

bluez vulnerabilities

Published Feb 12, 2025 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Julian Rauchberger discovered that BlueZ did not correctly handle certain
memory operations. An attacker could possibly use this issue to leak
sensitive information or execute arbitrary code.
(CVE-2019-8921, CVE-2019-8922)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS bluez 5.37-0ubuntu5.3+esm5

Vulnerabilities 2

  • High 8.8
    CVE-2019-8922

    A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there…

    bluez bluez Debian Ubuntu
  • Medium 6.5
    CVE-2019-8921

    An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ b…

    bluez bluez Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2019-8921
  • report
    https://ubuntu.com/security/CVE-2019-8922