packages_apps_Bluetooth_AOSP10_r33_CVE-2021-0329

Este repositorio no tiene un README...

CVE-2017-0781

CVE-2017-0781 PoC Overview This is an implementation of the CVE-2017-0781 Android heap overflow vulnerability described in the Blueborne whitepaper released by Armis. Further reading: https://www.armis.com/blueborne/ In the current state, this code only demonstrates the overflow and the ability o...

blueshrimp

Prueba de concepto para CVE-2025-48593 basada en el análisis del parche. No deberías preocuparte por esto. Por lo que puedo decir, los teléfonos NO son vulnerables a CVE-2025-48593. El problema solo afecta a dispositivos Android que admiten actuar como auriculares / altavoces Bluetooth, como...

CVE-2025-48593

CVE-2025-48593 "A single malicious packet can own your device." — Android Security Team, Nov 2025 Zero-Click Remote Code Execution in Android System Bluetooth Subsystem ⚠️ Critical Scope Clarification Updated April 2026 Standard phones and tablets are NOT vulnerable. CVE-2025-48593 only affects...

CVE-2026-28606

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28623

CVE-2026-28623 is a missing permission check in the writeToParcel method of BleRssiRangingCapabilities.java , a component within Android's Ultra-Wideband (UWB) subcomponent. The flaw allows a local app to obtain the device's Bluetooth MAC address without requiring additional execution privileges ...

CVE-2026-28606

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2020-0023

CVE-2020-0022 Seems like Android 9-6 have similar Bluetooth subsystem, Android 5 and 4 are different. Android 9.0 BlueFrag experiments Patch: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf Below I hit the patched condition. OK I think I got it, but...

Exploit for Incorrect Calculation in Google Android

CVE-2020-0022 Many thanks to Insinuator for their amazing blo...

EUVD-2016-4852

Malware in sbrugna...

EUVD-2018-21149

Malware in sbrugna...

EUVD-2016-7622

Malware in sbrugna...

EUVD-2017-4759

Malware in sbrugna...

EUVD-2025-18755

Malicious code in bioql PyPI...

CVE-2025-20991

Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable...

CVE-2022-20333

In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-179161657...

CVE-2020-0471

In reassembleanddispatch of packetfragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution...

CVE-2019-9257

In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113572342...

PT-2024-21758 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In the sendHciCommand function of bluetooth hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused by the use of callbackthreadevent after release in the comAndroidbluetoothbtserviceAdapterService.cpp script. An attacker can exploit this...