132 matches found
ROS-20220628-02
A vulnerability in the Bluetooth protocol stack for Linux BlueZ is related to insufficient validation of user input during A2DP profile processing. user input during A2DP profile processing. Exploitation of the vulnerability could allow an attacker, remotely, transmit specially crafted data to th...
PT-2022-3343
Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description The issue is related to insufficient input validation when handling the A2DP profile in the Bluetooth protocol stack for Linux. This can be exploited by a remote attacker using specially crafte...
Updated bluez packages fix security vulnerability
It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code...
PT-2022-37572
Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description The issue is related to incorrect validation of certain capabilities and lengths when handling the A2DP profile. A remote attacker could exploit this to cause BlueZ to crash, resulting in a...
USN-5481-1: BlueZ vulnerabilities
It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code...
USN-5481-1 bluez vulnerabilities
It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code...
CVE-2021-39772
In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2021-39772
In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2021-39772: Improper Privilege Management
In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
PT-2022-11050
Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a missing permission check in Bluetooth, allowing access to the a2dp audio control switch. This could lead to local escalation of privilege without requiring...
CVE-2021-0999
In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Design/Logic Flaw
In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2021-0999
In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2021-0999
CVE-2021-0999 affects Android 12 and relates to the broadcast definition in AndroidManifest.xml that can set the A2DP Bluetooth device connection state due to a missing permission check. The underlying issue is a privilege-escalation flaw that does not require user interaction and can be exploite...
CVE-2021-0999: Missing Authorization
In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
PT-2021-13404
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a missing permission check in the broadcast definition in AndroidManifest.xml, which could allow setting the A2DP bluetooth device connection state. This could lead to local...
Google Android 安全漏洞
An elevation of privilege vulnerability exists in Google Android, a Linux-based open source operating system from Google, Inc. The vulnerability stems from a lack of privilege checking in the broadcast definition of AndroidManifest.xml, which could potentially set the A2DP Bluetooth device...
PUB-A-196858999
In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2020-0236
In A2DPGetCodecType of a2dpcodecconfig, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android, Versions: Android-10...
CVE-2020-0236
CVE-2020-0236 affects Android 10 and specifically the A2DP_GetCodecType path in the a2dp_codec_config. The issue is an out-of-bounds read caused by improper input validation, leading to possible remote information disclosure without extra execution privileges and without user interaction. The vul...