Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile (AVRCP) implementation allows a malicious Bluetooth device within range to cause an out-of-bounds memory read. This vulnerability, affecting the parse_media_element() and parse_media_folder() functions, can lead to a crash of the bluetoothd daemon, resulting in a Denial of Service (DoS). It could also potentially expose sensitive heap memory contents. Exploitation requires user interaction to pair with the malicious device.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-75032 BlueZ Denial of Service Via Out-of-Bounds Read in AVRCP https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-75032
Post summary
CVE-2026-75032 is a BlueZ Denial‑of‑Service vulnerability in AVRCP caused by an out‑of‑bounds read, with details linked to a Vulmon report.