📄 Samsung Galaxy Zero-Click HFP/A2DP Takeover

Samsung Galaxy buds have an issue where an attacker within Bluetooth range can force a transition of the active audio session to an attacker-controlled device without requiring user interaction. Samsung believes it is a non-issue. MESSAGE HASH SHA-256:...

Session fixation

Apple iOS before 8 enables Bluetooth during all upgrade actions, which makes it easier for remote attackers to bypass intended access restrictions via a Bluetooth session...

PT-2014-5828

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description The issue allows remote attackers to bypass intended access restrictions via a Bluetooth session, making it easier for them to gain unauthorized access. This is because Bluetooth is enabled during all...