CVE-2026-79377
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
Risk Assessment
An attacker can remotely cause a crash of the Bluetooth audio device, potentially leading to service disruption and device unavailability.
Recommendation
It is recommended to update the BES2300 firmware to the latest available version that includes a fix for this vulnerability.
Other vulnerabilities in Bestechnic BES2300
See all- CVE-2026-79379Medium
A buffer overflow in the SBC_DecodeFrames() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted frame.
- CVE-2026-79378High
An issue in the btm_acl_handle() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
- CVE-2026-79376High
An issue in the l2cap_handle_data() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
Original NVD description (English source)
A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS