SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-79377

HIGH · CVSS 7.5 EPSS 0.38% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A heap overflow vulnerability in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware versions 3.x and earlier can be exploited by attackers to trigger a Denial of Service (DoS) by sending specially crafted L2CAP packets. Organizations utilizing this firmware should prioritize patching to mitigate potential disruptions to Bluetooth audio services.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-79377
Severity
HIGH
CVSS
7.5
EPSS
0.38%

Original NVD Description

A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.