Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-16473 →
DEBIAN-CVE-2026-16473
A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-by...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
sbc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
sbc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
sbc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Références
- advisory security-tracker.debian.org