Lucene search

K
osvGoogleOSV:ASB-A-169327567
HistoryJan 01, 2021 - 12:00 a.m.

Bluetooth Classic (BR/EDR) data injection in L2CAP connections over piconet "Leathery Coffee"

2021-01-0100:00:00
Google
osv.dev
16
bluetooth
injection
security
encryption
privilege escalation
vulnerability
software

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

42.1%

In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

42.1%

Related for OSV:ASB-A-169327567