CERT24CVE-2026-80186 — BlueZ stack overflow in name2utf8 causes DoS and potential code executionLoading data…

CVE-2026-80186 — BlueZ stack overflow in name2utf8 causes DoS and potential code execution

A stack-based buffer overflow exists in the BlueZ Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response (EIR) packet that may cause the bluetoothd service to crash during Bluetooth discovery, resulting in denial of service (DoS) and potentially allowing arbitrary code execution.

← Back to intelligence

CVE-2026-80186 — BlueZ stack overflow in name2utf8 causes DoS and potential code execution

A stack-based buffer overflow exists in the BlueZ Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response (EIR) packet that may cause the bluetoothd service to crash during Bluetooth discovery, resulting in denial of service (DoS) and potentially allowing arbitrary code execution.