CVE-2022-20021: Undefined Security Weakness

In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMPhostconnectionreq. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-31785: Improper Locking

The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMPhostconnectionreq packets, allowing attackers in radio range to trigger a denial of service deadlock of the device via crafted LMP packets. Manual user intervention i...