CVE-2026-79377
HighCVSS 7.5Summary
A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
Risk Assessment
An attacker can remotely cause a crash of the Bluetooth audio device, potentially leading to service disruption and device unavailability.
Recommendation
It is recommended to update the BES2300 firmware to the latest available version that includes a fix for this vulnerability.
Other vulnerabilities in Bestechnic BES2300
See all- CVE-2026-79379Unknown
A buffer overflow in the SBC_DecodeFrames() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted frame.
- CVE-2026-79378Unknown
An issue in the btm_acl_handle() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
- CVE-2026-79376Unknown
An issue in the l2cap_handle_data() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
Original NVD description (English source)
A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.