MEDIUM 5.7 NVD

CVE-2026-80185

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parse

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd.

References

https://access.redhat.com/security/cve/CVE-2026-80185
https://bugzilla.redhat.com/show_bug.cgi?id=2524139

Published: 2026-08-25 · Source: NVD · Feed updated: 2026-08-26

This medium severity vulnerability with a CVSS score of 5.7 was published on 2026-08-25 via NVD.

vulnfeed aggregates 11369 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.