CVE-2026-92241 | ZephyrProject Zephyr up to 4.4.x AVRCP Browsing Channel avrcp.c browsing_avrcp_l2cap_alloc_buf resource consumption

A vulnerability classified as critical has been found in ZephyrProject Zephyr up to 4.4.x. Affected is the function browsing_avrcp_l2cap_alloc_buf of the file subsys/bluetooth/host/classic/avrcp.c of the component AVRCP Browsing Channel. The manipulation leads to resource consumption.

This vulnerability is documented as CVE-2026-92241. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More