Product:
Bluetooth
Summary
A denial-of-service issue was addressed with improved validation. An attacker in a privileged network position may be able to perform a denial-of-service attack using crafted Bluetooth packets. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, visionOS 26.3, iOS 26.3, and iPadOS 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-20650 |
Exploitation
To exploit this vulnerability, an attacker must be in a privileged network position and send specially crafted Bluetooth packets to the target device. If successful, this could lead to a denial-of-service condition, disrupting the normal operation of the affected device.
Affected Products
- watchOS 26.3 – Fixed denial-of-service issue with improved validation.
- tvOS 26.3 – Addressed vulnerability related to Bluetooth packets.
- macOS Tahoe 26.3 – Resolved denial-of-service risk from crafted Bluetooth packets.
- visionOS 26.3 – Mitigated Bluetooth-related denial-of-service issue.
- iOS 26.3 – Improved validation to prevent denial-of-service attacks.
- iPadOS 26.3 – Fixed vulnerability that could lead to denial-of-service.
Mitigation
To mitigate this issue, users should update their devices to the latest versions of the operating systems mentioned. Regularly applying updates can help protect against known vulnerabilities and improve overall security.