CVE-2026-79378
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
An issue in the btm_acl_handle() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
Risk Assessment
A remote attacker could cause device crash or unavailability, potentially disrupting Bluetooth audio systems.
Recommendation
Update BES2300 firmware to a patched version if available and monitor Bestechnic security advisories.
Other vulnerabilities in Bestechnic BES2300
See all- CVE-2026-79379Medium
A buffer overflow in the SBC_DecodeFrames() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted frame.
- CVE-2026-79377High
A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
- CVE-2026-79376High
An issue in the l2cap_handle_data() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
Original NVD description (English source)
An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS