CVE-2026-79378 Details

An integer truncation vulnerability has been identified in the Bestechnic Co., Ltd. BES2300 Bluetooth Audio SoC firmware versions through 3.x. This vulnerability resides in the L2CAP (Logical Link Control and Adaptation Protocol) layer, specifically within the btm_acl_handle() function. The issue allows attackers to cause a denial-of-service (DoS) by sending crafted L2CAP packets. The vulnerability arises because the L2CAP PDU length, when declared as 0xFFFF, is improperly handled, leading to a buffer overflow. This exploitation can cause heap corruption, with potential consequences of remote code execution or a system crash.

Users are advised to upgrade to version 5.0 / RC06 or later, as this vulnerability has been addressed in the latest release. For those on legacy versions who cannot upgrade immediately, a reference patch is available to add the necessary bounds checks and prevent exploitation.