Denial of Service in Bestechnic BES2300 Bluetooth Audio SoC

Publication date: 2026-09-08

Last updated on: 2026-09-08

Assigner: MITRE

Description

An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-08

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-79376

Affected Vendors & Products

Vendor	Product	Version / Range
bestechnic_co_ltd	bes2300_bluetooth_audio_soc_firmware	to 4.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-1284	The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

Executive Summary

This vulnerability is a Denial of Service (DoS) issue in the l2cap_handle_data() function of the Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware versions 3.x and earlier. Attackers can exploit it by sending a specially crafted L2CAP packet, which causes the system to crash or become unresponsive.

Impact Analysis

If exploited, this vulnerability could disrupt the normal operation of devices using the BES2300 Bluetooth Audio SoC firmware. This may lead to system crashes, loss of functionality, or require a reboot to restore service. It could affect audio devices, IoT gadgets, or other systems relying on this Bluetooth SoC.

Mitigation Strategies

Update the BES2300 Bluetooth Audio SoC firmware to a version later than v3.x to address the issue in the l2cap_handle_data() function. Disable Bluetooth if not in use and monitor network traffic for unusual L2CAP packets.

Hi! I’m here to help you understand CVE-2026-79376. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70