Launchpad.net

CVE 2022-39176

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.

See the CVE page on Mitre.org for more details.