475 matches found
CVE-2025-53470 Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver
Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver. This issue affects Apache NimBLE: through 1.8. This issue requires a broken or bogus Bluetooth controller and thus severity is considered low. Users are...
CVE-2023-54197
In the Linux kernel, the following vulnerability has been resolved: Revert "Bluetooth: btsdio: fix use after free bug in btsdioremove due to unfinished work" This reverts commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f. This patch introduces a possible null-ptr-def problem. Revert it. And the fix...
EUVD-2025-203782
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Avoid btusbmtkclaimisointf NULL deref In btusbmtksetup, we set btmtkdata-isopktintf to: usbifnumtoifdata-udev, MTKISOIFNUM That function can return NULL in some cases. Even when it returns NULL, though...
CVE-2025-68306
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface When performing reset tests and encountering abnormal card drop issues that lead to a kernel crash, it is necessary to perform a null check before...
Vulnerability of the btmtk_usb_isointf_init() function in the drivers/bluetooth/btmtk.c module – This driver for Bluetooth devices in Linux allows a hacker to cause a service failure.
Vulnerability of the btmtkusbisointfinit function in the drivers/bluetooth/btmtk.c module – The Bluetooth device support driver in Linux operating systems relies on pointer swapping. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the btusb_mtk_claim_iso_intf() function in the drivers/bluetooth/btusb.c module – This driver for Bluetooth devices in the Linux kernel allows a hacker to trigger a service failure.
Vulnerability of the btusbmtkclaimisointf function in the drivers/bluetooth/btusb.c module – The Bluetooth device support driver in Linux operating systems is vulnerable due to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-40283
CVE-2025-40283 concerns the Linux kernel Bluetooth driver btusb (btusb_disconnect) where cleanup is performed in the wrong order, leading to a use-after-free (UAF) of btusb data after usb_driver_release_interface frees the interface data. The issue is observed as a KASAN slab-use-after-free read ...
EUVD-2025-93444
Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally...
kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek()
A NULL pointer access may result in compromised availability...
kernel: Linux kernel: Denial of Service in Bluetooth HCI UART driver via null pointer dereference
A flaw was found in the Linux kernel's Bluetooth HCI UART driver. A race condition exists where the hciuartwritework function may attempt to access uninitialized private data if a TTY write wakeup occurs during the protocol initialization phase. This can lead to a NULL pointer dereference,...
kernel: Linux kernel: Denial of Service in Bluetooth HCI UART driver via null pointer dereference
A flaw was found in the Linux kernel's Bluetooth HCI UART driver. A race condition exists where the hciuartwritework function may attempt to access uninitialized private data if a TTY write wakeup occurs during the protocol initialization phase. This can lead to a NULL pointer dereference,...
Microsoft Bluetooth Driver 缓冲区错误漏洞
Microsoft Bluetooth Driver is an application software Bluetooth driver from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Bluetooth Driver. An attacker could exploit this vulnerability to obtain sensitive information. The following products and editions are...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hcidevcdappend would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb. Reported-by : Dan Carpenter...
Siemens SIMATIC Devices Race Condition (CVE-2024-24857)
A race condition was found in the Linux kernel's net/bluetooth device driver in conninfomin,maxageset function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service. This plugin only works with Tenable.ot. Please visit...
Microsoft Windows Bluetooth Service 资源管理错误漏洞
Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Bluetooth Service, which stems from an attacker's ability to elevate privileges by exploiting the vulnerability...
Microsoft Windows Bluetooth Service 资源管理错误漏洞
Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Bluetooth Service, which stems from an attacker's ability to elevate privileges by exploiting the vulnerability...
EUVD-2010-4215
Malware in sbrugna...
EUVD-2017-4689
Malware in sbrugna...