[Git][security-tracker-team/security-tracker][master] Crossreference ZDI report for CVE-2026-19774

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
15e67e5d by Salvatore Bonaccorso at 2026-09-17T23:07:07+02:00
Crossreference ZDI report for CVE-2026-19774

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7555,6 +7555,7 @@ CVE-2026-19780 (Koha Eval Code Injection Remote Code Execution Vulnerability. Th
 	- koha <itp> (bug #702134)
 CVE-2026-19774 (BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerabi ...)
 	- bluez 5.87-1
+	NOTE: https://www.zerodayinitiative.com/advisories/ZDI-26-589/
 	NOTE: https://github.com/bluez/bluez/pull/2251
 	NOTE: Fixed by: https://github.com/bluez/bluez/commit/912f5efb0dd9bb08e408d33371a57182c5678aef (5.87)
 CVE-2026-19773 (libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Rem ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15e67e5db67ff9ac63c27707f6e5f7d2c4401712

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15e67e5db67ff9ac63c27707f6e5f7d2c4401712
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260917/bb6cc67a/attachment.htm>