CVE-2026-28528 LOW

CVE-2026-28528: BlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined Behavior

Vendor Bluekitchen Gmbh
Product BTstack
Weakness CWE-125
Published March 30, 2026
Last update March 30, 2026
View on NVD All CVEs

CVSS base score

2.1/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GET_FOLDER_ITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connection can exploit insufficient bounds checking on the attr_id parameter to cause crashes and corrupt attribute bitmap state.

Key dates

02Disclosure timeline

March 30, 2026 CVE published
March 30, 2026 Record updated