CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

CVE-2023-46916

CVE-2023-46916 affects Maxima Max Pro Power 1.0 486A watches. The BLE threat is a replay at GATT handle 0x0012, enabling unauthorized actions such as starting/changing the heart‑rate monitor and related display/notification changes. Public exploit notes describe unauthenticated access demonstrati...

PT-2023-30260 · Unknown · Maxima Max Pro Power

Name of the Vulnerable Software and Affected Versions: Maxima Max Pro Power version 1.0 486A Description: The issue allows BLE traffic replay, enabling an attacker to perform potentially disruptive actions. This can be achieved by using the GATT characteristic handle 0x0012, for example, to start...

Maxima Max Pro Power 1.0 486A BLE Traffic Replay

Exploit Title: Maxima Max Pro Power - BLE Traffic Replay Unauthenticated Date: 13-Nov-2023 Exploit Author: Alok kumar [email protected], Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.maximawatches.com Product Link: https://www.maximawatches.com/products/max-pro-power Firmware...

ASB-A-273874525

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-35658

In gattprocessprepwritersp of gattcl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused by use after release in gattprocessprepwritersp in gattcl.cc. An attacker can exploit this vulnerability to execute arbitrary code on the system...

PT-2023-25246 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a possible privilege escalation due to a use after free in the gatt process prep write rsp function of gatt cl.cc. This could lead to remote code execution with no...

PT-2023-25259 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a possible out of bounds write due to an integer overflow in the build read multi rsp function of gatt sr.cc. This could lead to remote code execution with no...

ASB-A-271335899

In eattl2capreconfigcompleted of eattimpl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-273966636

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-274617156

In gattprocessprepwritersp of gattcl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21647

Information disclosure in Bluetooth when an GATT packet is received due to improper input validation...

Input validation

Information disclosure in Bluetooth when an GATT packet is received due to improper input validation...

CVE-2023-21647 Improper Input Validation in Bluetooth HOST

Information disclosure in Bluetooth when an GATT packet is received due to improper input validation...

CVE-2023-21647

CVE-2023-21647 involves information disclosure in Bluetooth when a GATT packet is received due to improper input validation. The issue is described across multiple sources as a Bluetooth HOST vulnerability (Qualcomm closed-source component) with CVSS v3.1 base score 6.5 (Network, Low complexity, ...

PT-2023-18310 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to information disclosure in Bluetooth when a GATT packet is received. This occurs due to improper input validation. Recommendations: At the moment, there is no...

CVE-2023-21250

In gattendoperation of gattutils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android OS 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android OS, which stems from a lack of bounds checking and possible out-of-bounds writes in gattendoperation in gattutils.cc...