CVE-2017-0781

CVE-2017-0781 PoC 概述 这是 Armis 发布的 Blueborne 白皮书中描述的 CVE-2017-0781 Android 堆溢出漏洞的实现。进一步阅读：https://www.armis.com/blueborne/ 在当前状态下，此代码仅演示了溢出和使蓝牙服务崩溃的能力。再次强调，这不是一个完整的远程代码执行，但它可以发展成那样。 说明 获取 pwntools。 root@kitploit: apt-get update apt-get install python2.7 python-pip python-dev git libssl-dev...

CVE-2025-48593

CVE-2025-48593 "一个恶意数据包就能掌控你的设备。" — Android 安全团队，2025年11月 在安卓系统（蓝牙子系统）中的零点击远程代码执行 ⚠️ 关键范围澄清（2026年4月更新） 标准手机和平板电脑不受影响。 CVE-2025-48593 仅影响支持 作为 蓝牙耳机/扬声器的安卓设备——例如智能手表、智能眼镜和汽车 。 此外，攻击者必须让受害者接受蓝牙配对请求 后才能利用耳机服务。只需拒绝配对请求即可提供保护。 来源：独立 PoC 研究员 worthdoingbadly.com，2025年12月 漏洞概览 属性| 详情 ---|--- CVE ID|...

CVE-2020-0023

CVE-2020-0022 Parece que Android 9-6 tienen un subsistema Bluetooth similar, Android 5 y 4 son diferentes. Android 9.0 Experimentos BlueFrag Parche: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf A continuación, alcancé la condición del parche. Bien...

Exploit for Incorrect Calculation in Google Android

CVE-2020-0022 Many thanks to Insinuator for their amazing blo...

EUVD-2018-21149

Malware in sbrugna...

EUVD-2016-4852

Malware in sbrugna...

EUVD-2017-4759

Malware in sbrugna...

EUVD-2016-7622

Malware in sbrugna...

EUVD-2025-18755

Malicious code in bioql PyPI...

CVE-2025-20991

Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable...

CVE-2022-20333

In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-179161657...

CVE-2020-0471

In reassembleanddispatch of packetfragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution...

CVE-2019-9257

In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113572342...

PT-2024-21758 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In the sendHciCommand function of bluetooth hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused by the use of callbackthreadevent after release in the comAndroidbluetoothbtserviceAdapterService.cpp script. An attacker can exploit this...

The vulnerability of the Bluetooth component of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Bluetooth component in the Android operating system is related to a buffer overflow issue. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Bluetooth component of the Android operating system, which allows a intruder to disclose protected information

The vulnerability of the Bluetooth component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to disclose protected information...

CVE-2023-21196

In btmblebatchscanfiltertrackadvvsecback of btmblebatchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for...

Out-of-bounds

In gattdbgopname of gattutils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-20988

In btmreadrssicomplete of btmacl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...