Skip to content
Sign in
5.3 Medium

CVE-2020-15710 Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program

Description

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in 1:8.0-0ubuntu3.14.

Affected products and versions

Product Affected versions Fixed in
pulseaudio Versions not published

Other CVEs of pulseaudio

The 3 CVEs of pulseaudio →
CVE-2020-16123 An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a… 4.4 Medium CVE-2020-11931 An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found… 3.3 Low
Track this CVE