CVE-2020-0023

CVE-2020-0022 似乎 Android 9 到 6 具有相似的蓝牙子系统，而 Android 5 和 4 则不同。 Android 9.0 BlueFrag 实验 补丁： https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf 下面我命中了补丁条件。好的，我想我明白了，但不知为何我无法使进程崩溃。 hmmmm 实际上，设法将带符号的长度值传入 memcpy 02-16 01:44:49.096 6423 6471 W...

packages_apps_Bluetooth_AOSP10_r33_CVE-2021-0329

Este repositorio no tiene un README...

CVE-2017-0781

CVE-2017-0781 PoC Descripción general Esta es una implementación de la vulnerabilidad de desbordamiento de montículo heap overflow en Android CVE-2017-0781, descrita en el libro blanco de Blueborne publicado por Armis. Lectura adicional: https://www.armis.com/blueborne/ En el estado actual, este...

CVE-2025-48593

CVE-2025-48593 "一个恶意数据包就能掌控你的设备。" — Android 安全团队，2025年11月 在安卓系统（蓝牙子系统）中的零点击远程代码执行 ⚠️ 关键范围澄清（2026年4月更新） 标准手机和平板电脑不受影响。 CVE-2025-48593 仅影响支持 作为 蓝牙耳机/扬声器的安卓设备——例如智能手表、智能眼镜和汽车 。 此外，攻击者必须让受害者接受蓝牙配对请求 后才能利用耳机服务。只需拒绝配对请求即可提供保护。 来源：独立 PoC 研究员 worthdoingbadly.com，2025年12月 漏洞概览 属性| 详情 ---|--- CVE ID|...

blueshrimp

针对 CVE-2025-48593 的概念验证，基于对补丁的分析。 你无需为此担心。据我所知，手机不会 受到 CVE-2025-48593 的影响。该问题仅影响支持充当蓝牙耳机/扬声器的 Android 设备，例如某些智能手表、智能眼镜和汽车。此外，攻击者必须先让受害者与其配对，之后才能访问耳机服务。只要你不接受智能手表/眼镜/汽车上的配对请求，就不会有事。 这个概念验证没有任何实际用途：它只会让 Android Automotive 模拟器崩溃，报错 fault addr 0x4141414141414141。 你可以在我博客上阅读我的分析文章。 结果 在 Android Studio...

Exploit for Incorrect Calculation in Google Android

CVE-2020-0022 Many thanks to Insinuator for their amazing blo...

EUVD-2018-21149

Malware in sbrugna...

EUVD-2016-4852

Malware in sbrugna...

EUVD-2017-4759

Malware in sbrugna...

EUVD-2016-7622

Malware in sbrugna...

EUVD-2025-18755

Malicious code in bioql PyPI...

CVE-2025-20991

Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable...

CVE-2022-20333

In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-179161657...

CVE-2020-0471

In reassembleanddispatch of packetfragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution...

CVE-2019-9257

In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113572342...

PT-2024-21758 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In the sendHciCommand function of bluetooth hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused by the use of callbackthreadevent after release in the comAndroidbluetoothbtserviceAdapterService.cpp script. An attacker can exploit this...

The vulnerability of the Bluetooth component of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Bluetooth component in the Android operating system is related to a buffer overflow issue. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Bluetooth component of the Android operating system, which allows a intruder to disclose protected information

The vulnerability of the Bluetooth component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to disclose protected information...

CVE-2023-21196

In btmblebatchscanfiltertrackadvvsecback of btmblebatchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for...