Bluetooth DoS in Bestechnic BES2300 Firmware

Publication date: 2026-09-08

Last updated on: 2026-09-09

Assigner: MITRE

Description

An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-79378

Affected Vendors & Products

Vendor	Product	Version / Range
bestechnic_co_ltd	bes2300_firmware	to 4.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a Denial of Service (DoS) issue in the BES2300 Bluetooth Audio SoC firmware. It occurs in the btm_acl_handle() function, where attackers can exploit it by sending a specially crafted L2CAP packet. This causes the system to crash or become unresponsive.

Impact Analysis

If exploited, this vulnerability could disrupt the normal operation of devices using the BES2300 firmware. This may lead to system crashes, loss of functionality, or temporary unavailability of Bluetooth audio services.

Mitigation Strategies

Update the BES2300 Bluetooth Audio SoC firmware to a version later than v3.x to address the issue in the btm_acl_handle() function. Monitor network traffic for unusual L2CAP packets that may indicate exploitation attempts.

Hi! I’m here to help you understand CVE-2026-79378. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70