title: Red Hat Security Advisory: bluez security update
description: BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability bluez: AVRCP stack-based buffer overflow remote code execution vulnerability bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability bluez: OBEX library out-of-bounds read information disclosure vulnerability bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability
cpes: cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb cpe:/o:redhat:enterprise_linux:9::baseos