PT-2026-29027 · Bluekitchen · Btstack

Vulncheck · CVE-2026-28528 · Published 2026-03-30 · Updated 2026-03-30

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions BlueKitchen BTstack versions prior to 1.8.1

Description The software contains a flaw where it does not properly check the limits of data packets and attribute counts. An attacker who has paired a Bluetooth Classic connection can take advantage of this insufficient boundary check on the attr id parameter. This can lead to crashes and corruption of the attribute bitmap state. The vulnerability resides in the AVRCP Browsing Target GET FOLDER ITEMS handler.

Recommendations Update to version 1.8.1 or later.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

CWE-758

Related Identifiers

CVE-2026-28528

Affected Products

Btstack

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28528.json · Exploit
• https://github.com/bluekitchen/btstack/releases/tag/v1.8.1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-28528 · Security Note
• https://osv.dev/vulnerability/CVE-2026-28528 · Vendor Advisory
• https://github.com/bluekitchen/btstack · Note
• https://vulncheck.com/advisories/bluekitchen-btstack-avrcp-browsing-target-get-folder-items-handler-oob-read-undefined-behavior · Note