Unrated severityNVD Advisory· Published May 3, 2024· Updated Nov 4, 2025
BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability
CVE-2023-27349
Description
BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.
The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19908.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
44- osv-coords42 versionspkg:rpm/almalinux/bluezpkg:rpm/almalinux/bluez-cupspkg:rpm/almalinux/bluez-libspkg:rpm/almalinux/bluez-libs-develpkg:rpm/almalinux/bluez-obexdpkg:rpm/opensuse/bluez&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/bluez&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/bluez&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/bluez&distro=openSUSE%20Tumbleweedpkg:rpm/suse/bluez&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/bluez&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-ESPOSpkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4pkg:rpm/suse/bluez&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP5pkg:rpm/suse/bluez&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/bluez&distro=SUSE%20Manager%20Server%204.2pkg:rpm/suse/bluez&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/bluez&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 5.72-2.el9+ 41 more
- (no CPE)range: < 5.72-2.el9
- (no CPE)range: < 5.72-2.el9
- (no CPE)range: < 5.72-2.el9
- (no CPE)range: < 5.72-2.el9
- (no CPE)range: < 5.72-2.el9
- (no CPE)range: < 5.62-150400.4.13.1
- (no CPE)range: < 5.65-150500.3.3.1
- (no CPE)range: < 5.62-150400.4.13.1
- (no CPE)range: < 5.68-2.1
- (no CPE)range: < 5.48-150200.13.25.1
- (no CPE)range: < 5.55-150300.3.22.1
- (no CPE)range: < 5.48-150000.5.49.1
- (no CPE)range: < 5.48-150200.13.25.1
- (no CPE)range: < 5.55-150300.3.22.1
- (no CPE)range: < 5.55-150300.3.22.1
- (no CPE)range: < 5.62-150400.4.13.1
- (no CPE)range: < 5.62-150400.4.13.1
- (no CPE)range: < 5.62-150400.4.13.1
- (no CPE)range: < 5.65-150500.3.3.1
- (no CPE)range: < 5.62-150400.4.13.1
- (no CPE)range: < 5.65-150500.3.3.1
- (no CPE)range: < 5.55-150300.3.22.1
- (no CPE)range: < 5.13-5.39.1
- (no CPE)range: < 5.13-5.39.1
- (no CPE)range: < 5.13-5.39.1
- (no CPE)range: < 5.13-5.39.1
- (no CPE)range: < 5.48-150000.5.49.1
- (no CPE)range: < 5.48-150200.13.25.1
- (no CPE)range: < 5.55-150300.3.22.1
- (no CPE)range: < 5.13-5.39.1
- (no CPE)range: < 5.13-5.39.1
- (no CPE)range: < 5.48-150000.5.49.1
- (no CPE)range: < 5.48-150200.13.25.1
- (no CPE)range: < 5.55-150300.3.22.1
- (no CPE)range: < 5.13-5.39.1
- (no CPE)range: < 5.13-5.39.1
- (no CPE)range: < 5.62-150400.4.13.1
- (no CPE)range: < 5.65-150500.3.3.1
- (no CPE)range: < 5.55-150300.3.22.1
- (no CPE)range: < 5.55-150300.3.22.1
- (no CPE)range: < 5.13-5.39.1
- (no CPE)range: < 5.13-5.39.1
Patches
Vulnerability mechanics
References
3- git.kernel.org/pub/scm/bluetooth/bluez.git/commit/mitrevendor-advisory
- www.zerodayinitiative.com/advisories/ZDI-23-386/mitrex_research-advisory
- lists.debian.org/debian-lts-announce/2024/05/msg00015.htmlmitre
News mentions
0No linked articles in our index yet.