14 matches found
CVE-2025-32876
An issue was discovered on COROS PACE 3 devices through 3.0808.0. The BLE implementation of the COROS smartwatch does not support LE Secure Connections and instead enforces BLE Legacy Pairing. In BLE Legacy Pairing, the Short-Term Key STK can be easily guessed. This requires knowledge of the...
CVE-2025-32876
creationtimestamp| type| source ---|---|--- 2025-06-20 14:43:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18972...
CVE-2025-32876
The CVE-2025-32876 issue affects COROS PACE 3 devices (through 3.0808.0). The BLE stack does not support LE Secure Connections and uses BLE Legacy Pairing, where the Short-Term Key can be easily guessed. The Temporary Key is 0 due to Just Works, enabling an attacker within Bluetooth range to snif...
CVE-2023-32876
In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308612; Issue ID: ALPS08308612...
CVE-2022-32876
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able to view the hidden photos album without authentication...
CVE-2023-32876
creationtimestamp| type| source ---|---|--- 2024-01-02 04:26:50+00:00| seen| https://t.me/ctinow/161471 2024-01-03 01:31:08+00:00| seen| https://t.me/cibsecurity/74126 2024-01-22 14:42:10+00:00| seen| https://t.me/ctinow/171189...
CVE-2023-32876
In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308612; Issue ID: ALPS08308612...
CVE-2023-32876
CVE-2023-32876 involves the keyInstall function where a missing bounds check can cause information disclosure, requiring local privileges (PR:H) with no user interaction. Affected context appears to be media/SoC environments (MediaTek-related references appear across multiple connected sources), ...
CVE-2022-32876
creationtimestamp| type| source ---|---|--- 2023-08-15 02:20:10+00:00| seen| https://t.me/cibsecurity/68520...
CVE-2022-32876
CVE-2022-32876 is a logic-issue vulnerability in macOS that could allow a shortcut to view the hidden Photos album without authentication. It is fixed in macOS Ventura 13. The issue is described as an improvement to restrictions and is fixed specifically for Ventura 13.0+. Affected product: macOS...
CVE-2022-32876
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able to view the hidden photos album without authentication...
Samsung Mobile Device Type Obfuscation Vulnerability (CNVD-2020-32876)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A type confusion vulnerability exists in Samsung mobile devices, which can be exploited by attackers to execute arbitrary code...
