235 matches found
The vulnerability of the Google Chrome browser’s Bluetooth service, related to writing beyond the buffer size of memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Google Chrome browser’s Bluetooth service is related to memory buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Google Chrome browser’s Bluetooth service, related to memory usage after deallocation, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Google Chrome browser’s Bluetooth service is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Debian DSA-4575-1 : chromium - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2019-13723 Yuxiang Li discovered a use-after-free issue in the bluetooth service. - CVE-2019-13724 Yuxiang Li discovered an out-of-bounds read issue in the bluetooth service. C Tenable Network Security, Inc. The...
CVE-2019-2049
In SendMediaUpdate and SendFolderUpdate of avrcpservice.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...
Memory corruption
In SendMediaUpdate and SendFolderUpdate of avrcpservice.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-2049
In SendMediaUpdate and SendFolderUpdate of avrcpservice.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2018-9590
In addattr of sdpdiscovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interactio...
CVE-2018-9560
In HIDDevAddRecord of hiddapi.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth service with User execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...
CVE-2018-9562
In btaagdodisc of btaagsdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android...
CVE-2018-9560
In HIDDevAddRecord of hiddapi.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth service with User execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...
CVE-2018-9566
In processservicesearchrsp of sdpdiscovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure when connecting to a malicious Bluetooth device with no additional execution privileges needed. User interaction is needed for...
CVE-2018-9560
In HIDDevAddRecord of hiddapi.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth service with User execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...
CVE-2018-9560
CVE-2018-9560 affects Android 9, in the HID stack. The issue is an out-of-bounds write in HID_DevAddRecord of hidd_api.cc caused by a missing bounds check, enabling local elevation of privilege in the Bluetooth service with no user interaction required. Impact is described as high (local EoP with...
CVE-2018-9541
In avrcparsvendorrsp of avcrparsct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...
CVE-2018-9541
In avrcparsvendorrsp of avcrparsct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...
CVE-2018-9544
In registerapp of btifhd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...
Out-of-bounds
In avrcparsvendorrsp of avcrparsct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...
Out-of-bounds
In registerapp of btifhd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...
The vulnerability of the `rfc_process_mx_message` function in the Android operating system’s Bluetooth service allows a hacker to disclose protected information.
The vulnerability of the rfcprocessmxmessage function in the Bluetooth service of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose information...
CVE-2018-9502
In rfcprocessmxmessage of rfctsframes.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Andro...