{"id":"MGASA-2026-0538","summary":"Updated bluez package fixes security vulnerabilities","details":"Out-of-bounds read in avrcp parse_media_element and parse_media_folder.\n(CVE-2026-75032)\nUnprivileged-local and adjacent-LE-peer leads to arbitrary code\nexecution as root. (CVE-2026-80185)\nStack Overflow in name2utf8 causes DoS and potential code execution.\n(CVE-2026-80186)\nAVRCP ListPlayerAttributes Double Stack Overflow. (CVE-2026-85218)\n","modified":"2026-10-24T00:15:04.993832962Z","published":"2026-10-24T00:09:07Z","upstream":["CVE-2026-75032","CVE-2026-80185","CVE-2026-80186","CVE-2026-85218"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0538.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=36192"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IEAQGME7YHJPXMGE233SURK752QRXULJ/"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517490"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIJJ3EIYPS7BJQ42GWBIECW4O26LYTXD/"},{"type":"ADVISORY","url":"https://github.com/bluez/bluez/security/advisories/GHSA-7mmr-gwqx-vc34"},{"type":"ADVISORY","url":"https://github.com/bluez/bluez/security/advisories/GHSA-68h6-5qgp-3975"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CZ5OXQJBQDRPBE4TGOYAU5OIYE7DBUSF/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KAGOUZ5PPAGUWRUYV5FOC2X6E7MYP7C5/"},{"type":"ADVISORY","url":"https://github.com/bluez/bluez/security/advisories/GHSA-m2vx-pw5f-rc8v"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8908-1"}],"affected":[{"package":{"name":"bluez","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/bluez?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.87-1.1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0538.json"}}],"schema_version":"1.9.0","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}