CVE-2026-19570 - Out-of-bounds write in LE Audio Broadcast Sink when copying BASE subgroup metadata into the BASS receive state
CVE ID :CVE-2026-19570 Published : Oct. 9, 2026, 8:16 a.m. | 1 hour, 13 minutes ago Description :The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service...