CVE-2024-7138 Denial of Service in Silicon Labs RS9116 Bluetooth SDK

An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device...

CVE-2024-7138 Denial of Service in Silicon Labs RS9116 Bluetooth SDK

An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device...

CVE-2024-7137 Denial of Service in Silicon Labs RS9116 Bluetooth SDK

The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet size. Receiving a packet that exceeds the restricted buffer length may cause a crash. A hard reset is required to recover the crashed device...

SUSE CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

Memory corruption

Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearab...

CVE-2020-11167

Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearab...

CVE-2020-11156

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

CVE-2020-11169

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

Integer overflow

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2020-11169

CVE-2020-11169 describes a buffer over-read while processing received L2CAP packets due to a missing integer overflow check, affecting multiple Qualcomm/Snapdragon platforms (APQ8009, APQ8053, QCA6390, QCN7605/7606, SA41x/SA51x/SA61x/SA8155P, SC8180X, SDX55) across Snapdragon Auto/Compute/Connect...

CVE-2020-11156

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Exploit for Incorrect Calculation in Google Android

...

BlueZ Out-of-Bounds Read Vulnerability

BlueZ is an official Bluetooth stack for Linux. A security vulnerability exists in the 'l2cappacket' function in the monitor/packet.c source file of BlueZ version 5.42. An attacker can exploit this vulnerability by running a compromised file to cause btmon to crash read across boundaries...

CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

CVE-2006-0671

Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...

CVE-2006-0670

CVE-2006-0670 is a buffer overflow in bluez-hcidump’s l2cap.c (hcidump 1.29) allowing a remote attacker to crash the system via a malformed L2CAP packet over Bluetooth. Debian/Ubuntu advisories document remote DoS with bluez-hcidump and show fixed/upgraded packages (e.g., bluez-hcidump 1.17-1sarg...

[ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones

Software affected Bluetooth Stack on Sony/Ericsson cell phones Version Sony/Ericsson K600i, V600i, W800i, T68i and certainly other models Impact Bluetooth Stack Denial of Service may be more - may be a rootkit : - Phone DoS reboot or shutdown - White screen bug freeze sleeping Credits Pierre...