This vulnerability in BlueZ affects the Audio/Video Remote Control Profile (AVRCP) by insufficiently validating packet length fields in GetFolderItems responses. The flaw allows an out-of-bounds memory read in the parse_media_element() and parse_media_folder() functions. A malicious Bluetooth device within radio range that is paired by the user can trigger this flaw, potentially crashing the bluetoothd daemon and causing a denial of service. Additionally, it may expose sensitive heap memory contents. The vulnerability requires user interaction to pair with the malicious device. Red Hat's advisory confirms the vulnerability and provides mitigation guidance but does not explicitly state a patch availability.

Exploitation can cause the bluetoothd daemon to crash, resulting in a denial of service on affected systems. There is also potential exposure of sensitive heap memory contents, which could include secret values such as cryptographic keys or memory addresses. However, exploitation requires user interaction to pair with a malicious Bluetooth device within range.

Red Hat recommends disabling the AVRCP Bluetooth profile if it is not needed or restricting Bluetooth pairing to trusted devices only. On systems where Bluetooth is not required, disabling the Bluetooth subsystem entirely is advised. No official fix or patch availability is explicitly stated in the advisory; therefore, users should follow these mitigation steps and monitor Red Hat's advisory for updates.