CVE-2025-15474

BLE Smart Lock Denial-of-Service DoS Vulnerability An unauthenticated Bluetooth Low Energy BLE connection flood can reliably prevent legitimate users from unlocking the device by interrupting keypad input and forcing repeated lockout states. 📌 Summary This repository documents a Denial-of-Service...

CVE-2025-69821: Improper Resource Shutdown or Release

An issue in Beat XP VEGA Smartwatch Firmware Version - RB303ATV006229 allows an attacker to cause a denial of service via the BLE connection...

CVE-2024-2105: Improper Validation of Specified Type of Input

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

CVE-2025-10457: Improperly Implemented Security Check for Standard

The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching...

CVE-2024-52325: Improper Neutralization of Special Elements used in a Command

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin over an unauthenticated BLE connection...

Heap-based Buffer Overflow

libzephyr.so is vulnerable to a Heap-based Buffer Overflow. The vulnerability is due to inadequate validation of buffer lengths in BLE connection update operations, which could lead to a divide by zero condition...

CVE-2023-30698

Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege...

CVE-2023-30698

Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege...

CVE-2023-30698

Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege...

CVE-2023-30698: Undefined Security Weakness

Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege...