29 matches found
Apple tvOS 缓冲区错误漏洞
Apple tvOS is an operating system for Smart TVs from Apple, Inc. Apple tvOS suffers from a buffer error vulnerability, which stems from the fact that processing maliciously crafted Bluetooth packets may result in a process memory leak...
Zephyr Denial of Service Vulnerability
Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. Zephyr suffers from a security vulnerability that results from unchecked packets from Bluetooth. No details of the vulnerability are provided at this time...
About the security content of tvOS 13.4.8 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Hcidump has an out-of-bounds access vulnerability
Hcidump is a tool for capturing and analyzing hci packets and supports reading local hci traffic packets. Hcidump suffers from an out-of-bounds access vulnerability. An attacker could exploit this vulnerability to cause the program to crash...
CVE-2019-19192
The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not properly handle consecutive Attribute Protocol ATT requests on reception, allowing attackers in radio range to cause an event deadlock or crash via crafted packets. Recent...
CVE-2018-16270
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path...
CVE-2012-6459
ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive information via Bluetooth packets...
Design/Logic Flaw
ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive information via Bluetooth packets...
