CVE-2016-10464: Improper Input Validation

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574AU, QCA9377, SD 210/SD 212/SD 205, SD 425, SD 600, SD 650/52, SD 808, SD 810, SD 820, and SDX20, lack of input validation for HCI H4...

CVE-2014-10054: Undefined Security Weakness

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 400, SD 450, SD 410/12, SD 425, SD 430, SD...

PT-2018-4145

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of input validation on BT HCI commands processing, which allows privilege escalation. This affects Qualcomm Snapdragon Automobile, Snapdragon...

PT-2018-5571

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a missing bounds check in the nfc hci cmd received function of core.c, which could lead to a local escalation of privilege in the kernel. This can be exploited without additional execution...

Fedora 27 : bluez (2017-77f991e537) (BlueBorne)

Security fix for CVE-2017-1000250 ---- - This update adds support for cable pairing for PlayStation 3 and 4 controllers. - Add scripts to automatically btattach serial-port / uart connected Broadcom HCIs found on some Atom based x86 hardware Note that Tenable Network Security has extracted the...

CVE-2016-10391

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity...

CVE-2016-10391

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity...

CVE-2016-10391: Improper Input Validation

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity...

hci-iweb.iwr.uni-heidelberg.de XSS vulnerability

Vulnerable URL: https://hci-iweb.iwr.uni-heidelberg.de/osTicket/file.php?key=lvfbpv4t6t8j9eswlvnxfgsa9uxkjirm=1501718400=a4c9921da16fc4cec2f12a027a0888aa90f39081 Details: Description| Value ---|--- Patched:| Yes, at 05.08.2017 Latest check for patch:| 05.08.2017 13:45 GMT Vulnerability type:| XSS...

PT-2017-2722

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises due to insufficient input validation, specifically in the length of an HCI command. This could potentially all...

BlueZ read-across-the-border vulnerability (CNVD-2016-11953)

BlueZ is an official Bluetooth stack for Linux. A security vulnerability exists in the 'lemetaevdump' function in the tools/parser/hci.c source file of BlueZ version 5.42. An attacker can exploit this vulnerability to read data across boundaries...

DEBIAN-CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

PT-2016-7831

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description An out-of-bounds read issue was found in the le meta ev dump function, located in the tools/parser/hci.c source file. This occurs because the subevent variable, used to read the correct element from the ev le met...

PT-2016-7827

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer overflow issue was found in the pklg read hci function in the btsnoop.c source file. This issue can be triggered by processing a corrupted dump file, resulting in a btmon crash. Recommendations For BlueZ...

Mac OS X Privilege Escalation

The vulnerability of the Bluetooth HCI interface in the Mac OS X operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption...

Memory corruption

The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-7108

The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-7108

The CVE-2015-7108 entry affects the Bluetooth HCI interface in Apple OS X prior to 10.11.2, where a memory corruption vulnerability in the HCI path allows local users to gain privileges or cause a denial of service. Root cause is memory corruption via unspecified vectors in the Bluetooth HCI hand...

PT-2015-2927

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.2 Description The issue is related to a buffer overflow in the Bluetooth HCI interface of the Mac OS X operating system. This can be exploited by a local attacker to either gain elevated privileges or cause a...