CVE-2006-3146: Toshiba Bluetooth Stack

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was originally reported for 4.00.23.

Affected products

• Toshiba Bluetooth Stack: up to and including 4.00.29; version 3.00.11 only; version 3.00.12 only; version 3.00.31a only; version 3.00.32 only; version 3.01.03 only; …

Published 2006-06-22. Last modified 2026-06-16.