https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-28528.htmlhttps://patchthecve.com/cve/CVE-2026-28528.htmlTue, 14 Jul 2026 19:16:54 +0000MEDIUM 4.6: BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GET_FOLDER_ITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connection can exploit insufficient bounds chechttps://patchthecve.com/cve/CVE-2026-28527.htmlhttps://patchthecve.com/cve/CVE-2026-28527.htmlTue, 14 Jul 2026 19:16:54 +0000LOW 3.5: BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GET_PLAYER_APPLICATION_SETTING_ATTRIBUTE_TEXT and GET_PLAYER_APPLICATION_SETTING_VALUE_TEXT handlers that allows nearby attackers to read beyond packet boundaries. Attackers can establish https://patchthecve.com/cve/CVE-2026-28526.htmlhttps://patchthecve.com/cve/CVE-2026-28526.htmlTue, 14 Jul 2026 19:16:54 +0000LOW 3.5: BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_ATTRIBUTES and LIST_PLAYER_APPLICATION_SETTING_VALUES handlers that allows attackers to read beyond buffer boundaries. A nearby attacker with a paired Bluet