shining-mask

Shining Mask Hacks This repository contains code and instructions for creating a custom Bluetooth Low Energy BLE controller for the Shining LED Mask that automatically changes the face image of any masks within BLE range. This repository is a companion to Invasion of the Facechangers: Halloween...

CVE-2020-13595

The Bluetooth Low Energy BLE controller implementation in Espressif ESP-IDF 4.0 through 4.2 for ESP32 devices returns the wrong number of completed BLE packets and triggers a reachable assertion on the host stack when receiving a packet with an MIC failure. An attacker within radio range can...

CVE-2020-13595: Reachable Assertion

The Bluetooth Low Energy BLE controller implementation in Espressif ESP-IDF 4.0 through 4.2 for ESP32 devices returns the wrong number of completed BLE packets and triggers a reachable assertion on the host stack when receiving a packet with an MIC failure. An attacker within radio range can...

PT-2020-13613

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 4.0 through 4.2 Description The issue concerns the Bluetooth Low Energy BLE controller implementation, which returns an incorrect number of completed BLE packets and triggers a reachable assertion on the host stack...

PT-2020-13612

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 4.2 and earlier Description The issue is related to the Bluetooth Low Energy BLE controller implementation, which does not properly restrict the channel map field of the connection request packet on reception. This...

CVE-2020-13594: Improper Input Validation

The Bluetooth Low Energy BLE controller implementation in Espressif ESP-IDF 4.2 and earlier for ESP32 devices does not properly restrict the channel map field of the connection request packet on reception, allowing attackers in radio range to cause a denial of service crash via a crafted packet...