CVE-2026-79379
UnknownSummary
A buffer overflow in the SBC_DecodeFrames() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted frame.
Risk Assessment
A remote attacker could cause device crash or unavailability, potentially disrupting Bluetooth audio systems.
Recommendation
Update BES2300 firmware to version v5.0 or later, which contains the fix.
Other vulnerabilities in Bestechnic BES2300
See all- CVE-2026-79378Unknown
An issue in the btm_acl_handle() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
- CVE-2026-79377High
A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
- CVE-2026-79376Unknown
An issue in the l2cap_handle_data() function of Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
Original NVD description (English source)
A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted frame.