blueshrimp

CVE-2025-48593에 대한 개념 증명으로, 패치를 분석하여 작성되었습니다. 이에 대해 걱정하지 않으셔도 됩니다. 제가 확인한 바로는 휴대폰은 CVE-2025-48593에 취약하지 않습니다. 이 문제는 Bluetooth 헤드폰/스피커 역할을 지원하는 Android 기기예: 일부 스마트워치, 스마트 글래스, 자동차에만 영향을 미칩니다. 또한 공격자는 헤드셋 서비스에 접근하기 전에 피해자가 공격자에게 페어링하도록 유도해야 합니다. 스마트워치/글래스/자동차에서 페어링 요청을 수락하지 않는 한 문제없습니다. 이 개념 증명은 어떤...

BlueDucky

BlueDucky Ver 2.1 Android 🦆 HackNexus의 모든 분들께 감사드립니다. VC에 꼭 참여해주세요! https://discord.gg/HackNexus 참고: 저는 라즈베리 파이 외의 노트북이나 다른 기기에서 이 프로그램을 테스트할 수 없습니다. 따라서 발생하는 모든 문제는 각자 해결하셔야 합니다. 어댑터를 구매할 여유 자금이 없기 때문입니다. 1. saad0x1의 GitHub 2. spicydll의 GitHub 3. lamentomori의 GitHub 🚨 CVE-2023-45866 - BlueDucky ...

Some cheap smart glasses are a security disaster

Apart from the privacy concerns around smart glasses, researchers have found that some cheap brands come with barely any security at all. ABC Australia reports that researchers from NSB Cyber and Abstract Shield tested two inexpensive pairs, costing A$60 and A$110 around US$42 and US$78, and foun...

CVE-2026-19774

A flaw was found in BlueZ. This vulnerability, a stack-based buffer overflow in the Advanced Audio Distribution Profile A2DP stack, allows a network-adjacent attacker to execute arbitrary code. By pairing a malicious Bluetooth device with the target system, an attacker can exploit improper...

CVE-2026-19774 BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...

Astra Linux – Vulnerability in Linux, BlueZ

In the Bluetooth Core Specification 2.1 through 5.2, Bluetooth LE and BR/EDR secure pairing mechanisms may allow a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the Passkey authentication procedure by reflecting the public key and the authentication evidence of...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: For SMP configurations, the requirement to enforce MITM Mutual Authentication, Mutual Encryption before generating the pairing response must be applied. Currently, the smpcmdpairingreq function generates the pairing...

CVE-2026-28606

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...

Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability

Overview Skullcandy Dime 3 wireless earbuds, running firmware version 1.0.0.28, accept a new Bluetooth Classic BR/EDR pairing request from an unpaired device without requiring the earbuds to be placed into pairing mode or requiring any physical confirmation or interaction from the owner...

Astra Linux – Vulnerability in Linux

In the Bluetooth BR/EDR Core Specification v5.2 and earlier, legacy pairing and secure-connection pairing authentication mechanisms may allow an unauthenticated user to complete the authentication process without using pairing credentials through adjacent access. An unauthenticated, adjacent...

CVE-2026-18282

Sony XAV-9500ES AVRCPBrResponseParser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to pair a malicious...

DEBIAN-CVE-2026-75032

A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile AVRCP implementation allows a malicious Bluetooth device within range to cause an out-of-bounds memory read. This vulnerability, affecting the...

CVE-2026-75032

A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile AVRCP implementation allows a malicious Bluetooth device within range to cause an out-of-bounds memory read. This vulnerability, affecting the...

CVE-2026-45813

Out-of-bounds Write, Integer Underflow Wrap or Wraparound vulnerability in Apache NimBLE BASS service. Improper validation when parsing BASS service "Add Source" and "Modify Source" operation PDU could results in stack buffer overflow or arbitrary out-of-bound read. This can be triggered by nearb...

EUVD-2026-48586

Out-of-bounds Write, Integer Underflow Wrap or Wraparound vulnerability in Apache NimBLE BASS service. Improper validation when parsing BASS service "Add Source" and "Modify Source" operation PDU could results in stack buffer overflow or arbitrary out-of-bound read. This can be triggered by nearb...

PT-2026-64281

Name of the Vulnerable Software and Affected Versions Apache NimBLE versions prior to 1.10.0 Description An integer underflow in the Apache NimBLE BASS service occurs due to improper validation when parsing Protocol Data Units PDU for the "Add Source" and "Modify Source" operations. This flaw can...

CVE-2026-1354

Zero Motorcycles firmware versions 44 and prior enable an attacker to forcibly pair a device with the motorcycle via Bluetooth. Once paired, an attacker can utilize over-the-air firmware updating functionality to potentially upload malicious firmware to the motorcycle. The motorcycle must first b...

The vulnerability of Android operating systems, related to the breach of data protection mechanisms, allows attackers to enhance their privileges.

The vulnerability of Android operating systems is related to the breach of data protection mechanisms during the pairing of Bluetooth devices. Exploiting this vulnerability allows a remote attacker to enhance their privileges...

CVE-2026-0097

In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android, which stem from logical errors in multiple locations. These vulnerabilities may bypass user interaction when pairing LE devices. This can lead to an...