CVE-2026-80185
Medium · 5.7CVSS
5.7
EPSS
0.3%
Published
Aug 25, 2026
CISA due date
—
The record
BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-16239 Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary… CWE-843
- CVE-2026-14680 Type confusion with PostgreSQL "internal" data type arguments allows any user to execute… CWE-843
- CVE-2026-14671 Type confusion in PostgreSQL module "refint" allows an object creator to execute… CWE-843
- CVE-2026-14668 Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows… CWE-843
- CVE-2026-58541 Access of resource using incompatible type ('type confusion') in Windows DWM allows an… CWE-843
- CVE-2026-50686 Access of resource using incompatible type ('type confusion') in Windows OLE allows an… CWE-843
- CVE-2026-50491 Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to… CWE-843
- CVE-2026-50421 Access of resource using incompatible type ('type confusion') in Windows Connected User… CWE-843