Design/Logic Flaw

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366CDEMOV1.0 does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after paging...

CVE-2021-31786

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...

CVE-2021-31612

The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet...

CVE-2021-34143

The CVE-2021-34143 entry affects the Bluetooth Classic implementation in Zhuhai Jieli AC6366C_DEMO_V1.0. The root cause, as described in the connected documents, is improper handling of continuous unsolicited LMP responses, enabling a nearby attacker to flood the device with LMP_AU_Rand packets a...

CVE-2021-31785

The CVE-2021-31785 issue affects the Bluetooth Classic implementation in Actions ATS2815 and ATS2819 chipsets. It arises when multiple LMP_host_connection_req packets are received, enabling a nearby attacker to cause a device deadlock/DoS in Bluetooth that requires manual user intervention to reb...

CVE-2021-31785

The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMPhostconnectionreq packets, allowing attackers in radio range to trigger a denial of service deadlock of the device via crafted LMP packets. Manual user intervention i...

CVE-2021-31786

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...

CVE-2021-31611

The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle an out-of-order LMP Setup procedure that is followed by a malformed LMP packet, allowing attackers in radio range to deadlock a device via a crafted LMP packet. The user needs to manually reboo...

CVE-2021-31611

The CVE-2021-31611 issue affects Zhuhai Jieli AC690X and AC692X Bluetooth Classic stacks. A malformed LMP packet following an out-of-order LMP Setup procedure can cause a deadlock in radio range devices, requiring a manual reboot to restore communication. Connected sources (NVD/Red Hat/CVE record...

PT-2021-4306

Name of the Vulnerable Software and Affected Versions Zhuhai Jieli AC6366C DEMO V1.0 Description The Bluetooth Classic implementation does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service deadlock of the...

PT-2021-4298

Name of the Vulnerable Software and Affected Versions Texas Instruments CC256XCQFN-EM affected versions not specified Description The Bluetooth Classic implementation does not properly handle the reception of continuous LMP AU Rand packets, allowing attackers in radio range to trigger a denial of...

CVE-2021-31786: Improper Locking

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...

CVE-2021-31785: Improper Locking

The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMPhostconnectionreq packets, allowing attackers in radio range to trigger a denial of service deadlock of the device via crafted LMP packets. Manual user intervention i...

CVE-2021-31611: Improper Locking

The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle an out-of-order LMP Setup procedure that is followed by a malformed LMP packet, allowing attackers in radio range to deadlock a device via a crafted LMP packet. The user needs to manually reboo...

CVE-2021-31612: Undefined Security Weakness

The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet...

PT-2021-4308

Name of the Vulnerable Software and Affected Versions Zhuhai Jieli AC690X devices affected versions not specified Description The Bluetooth Classic implementation does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure. This allow...

PT-2021-4303

Name of the Vulnerable Software and Affected Versions Zhuhai Jieli AC690X and AC692X devices affected versions not specified Description The Bluetooth Classic implementation does not properly handle an out-of-order LMP Setup procedure that is followed by a malformed LMP packet, allowing attackers...

CVE-2021-34149: Undefined Security Weakness

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMPAURand packets, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after the paging...

CVE-2021-34143: Undefined Security Weakness

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366CDEMOV1.0 does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after paging...

PT-2021-4302

Name of the Vulnerable Software and Affected Versions AB32VG1 devices affected versions not specified Description The Bluetooth Classic implementation does not properly handle the reception of continuous unsolicited LMP responses. This allows attackers in radio range to trigger a denial of servic...