PatchTheCVEbtstack vulnerabilities and fixes
Recent CVEs affecting btstack, with upgrade or downgrade steps. 3 tracked.
btstack has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-03-30. Highest priority: CVE-2026-28528 (score 17/100).
- CVE-2026-28528 MEDIUM 4.6 UPGRADE BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing
- CVE-2026-28527 LOW 3.5 UPGRADE BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controlle
- CVE-2026-28526 LOW 3.5 UPGRADE BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controlle
FAQ
How do I fix btstack vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is btstack being exploited right now?
None of the tracked btstack CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which btstack CVE should I patch first?
CVE-2026-28528 currently ranks highest (17/100): BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing .