PT-2026-29026 · Bluekitchen Gmbh · Btstack

Vulncheck · Published 2026-03-30 · Updated 2026-03-30 · CVE-2026-28527

NVD

CVSS v3.1

3.5

Low

AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GET PLAYER APPLICATION SETTING ATTRIBUTE TEXT and GET PLAYER APPLICATION SETTING VALUE TEXT handlers that allows nearby attackers to read beyond packet boundaries. Attackers can establish a paired Bluetooth Classic connection and send specially crafted VENDOR DEPENDENT responses to trigger out-of-bounds reads, causing information disclosure and potential crashes on affected devices.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-28527

Affected Products

Btstack

References · 3

• https://github.com/bluekitchen/btstack/releases/tag/v1.8.1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-28527 · Security Note
• https://vulncheck.com/advisories/bluekitchen-btstack-avrcp-controller-get-player-application-setting-text-handlers-oob-read · Note