What’s Vulnerable › Vulnerabilities

CVE-2026-16473: Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-22 · updated 2026-07-30
• Weakness: CWE-125

Description

A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory.

Affected products

• Red Hat Enterprise Linux 10: all versions
• Red Hat Enterprise Linux 7: all versions
• Red Hat Enterprise Linux 8: all versions
• Red Hat Enterprise Linux 9: all versions

References

• https://access.redhat.com/security/cve/CVE-2026-16473
• https://bugzilla.redhat.com/show_bug.cgi?id=2503650
• https://git.kernel.org/pub/scm/bluetooth/sbc.git
• https://lore.kernel.org/linux-bluetooth/1660735014.5089519.1785359719739@mail.yahoo.com/

Get alerted when CVE-2026-16473 or the next vulnerability affects your stack