CVE Watch8 sept 2026

CVE-2026-79377

A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows at

CVSS

7.5

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 8 sept 2026 · Última mod.: 8 sept 2026 · CWE-122

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-858807.8 ALT

—

———Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.4h CVE-2026-858778.8 ALT

—

———Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.4h CVE-2026-840007.8 ALT

—

———Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.4h CVE-2026-839988.8 ALT

—

———Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.4h CVE-2026-839968.8 ALT

—

———Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.4h CVE-2026-839957.8 ALT

—

———Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.4h