CVE-2023-27349

A vulnerability was found in the BlueZ Audio Profile AVRCP, stemming from the improper validation of array indices. This flaw resides in the AVRCP protocol handling and arises due to inadequate validation of user-supplied data. Consequently, it may lead to writing beyond the bounds of an allocated buffer. This flaw possibly allows a network-adjacent attacker to execute code within the root context via Bluetooth.

This vulnerability is considered moderate due to its potential impact stemming from improper validation of array indices within the BlueZ Audio Profile AVRCP implementation. The inadequate validation of user-supplied data could result in buffer overflow, enabling a network-adjacent attacker to execute code with root privileges via Bluetooth, contingent upon specific conditions being met.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.