50 matches found
CVE-2025-36911-exploit
WhisperPair Python CLI Strumento di exploit Fast Pair CVE-2025-36911 in Python per testare le nostre apparecchiature Autore: Sébastien Dudek @FlUxIuS @ Penthertz Crediti: whisperpair.eu per la scoperta e questa bella APK di @ZalexDev che ha ridotto i tempi di implementazione wpair-app ⚠️ Disclaime...
wpair-app
WPair CVE-2025-36911 z.B. WhisperPair Schwachstellen-Scanner & Forschungswerkzeug Funktionen • Installation • Verwendung • So funktioniert's • Sicherheitslücke • Danksagungen Haftungsausschluss Diese Anwendung ist eine unabhängige Umsetzung, die von @ZalexDev in eigener Verantwortung erstellt...
DLPwn
DLPwn Data Leak Prevention via Bluetooth Speaker DLPwn ist ein Red-Team-Tool, das für die Dateiexfiltration entwickelt wurde, um Sicherheitssysteme wie EDR Endpoint Detection and Response, XDR Extended Detection and Response, DLP Data Loss Prevention und allgemein alle luftspaltend air-gapped...
whisper-pair
फास्ट पेयर भेद्यता स्कैनर WhisperPair हमलों के प्रति संवेदनशील ब्लूटूथ एक्सेसरीज़ का पता लगाने के लिए सुरक्षा अनुसंधान उपकरण 🌐 WhisperPair अनुसंधान • 📦 स्थापना • 🚀 उपयोग • 🔬 तकनीकी विवरण ⚠️ अस्वीकरण यह उपकरण केवल अधिकृत सुरक्षा परीक्षण और अनुसंधान के लिए है। स्पष्ट प्राधिकरण के बिना उपकरणों का...
DEBIAN-CVE-2026-16473
A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...
AZL-93096 CVE-2026-16473 affecting package sbc 2.0-6
A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...
CVE-2026-16473
A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...
CVE-2026-16473
The CVE-2026-16473 vulnerability affects the sbc library used by the BlueZ SBC codec. A off-by-one bug in the SBC frame decoder enables a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of a...
EUVD-2026-47623
A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...
CVE-2026-16473 Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame
A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...
CVE-2026-10593
The Zephyr Bluetooth LE Audio Basic Audio Profile BAP unicast client mishandles peer-supplied ASE state notifications. In unicastclientepqosstate subsys/bluetooth/audio/bapunicastclient.c, the handler writes attacker-controlled QoS fields interval, framing, phy, sdu, rtn, latency, pd through the...
CVE-2026-43023 Bluetooth: SCO: fix race conditions in sco_sock_connect()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in scosockconnect scosockconnect checks skstate and sktype without holding the socket lock. Two concurrent connect syscalls on the same socket can both pass the check and enter scoconnect,...
SUSE-SU-2026:21293-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on scoconnfree bsc1255066. - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management...
SUSE-SU-2026:1447-1 Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on scoconnfree bsc1255066. - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy manageme...
CVE-2021-31786
The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...
SUSE CVE-2023-54036
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU The wifi + bluetooth combo chip RTL8723BU can leak memory especially? when it's connected to a bluetooth audio device. The busy bluetooth traffic generates lots of C2H ca...
CVE-2023-54036
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU The wifi + bluetooth combo chip RTL8723BU can leak memory especially? when it's connected to a bluetooth audio device. The busy bluetooth traffic generates lots of C2H ca...
CVE-2023-54036 wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU The wifi + bluetooth combo chip RTL8723BU can leak memory especially? when it's connected to a bluetooth audio device. The busy bluetooth traffic generates lots of C2H ca...
