BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c. https://ubuntu.com/security/notices/USN-5481-1 https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/1977968
Created bluez tracking bugs for this issue: Affects: fedora-all [bug 2125972]