CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE 缓冲区溢出 发现者 ：Golden Ticket Labs 厂商 ：Particle 分配日期 ：2025年8月12日（MITRE） 描述 Particle Device OS v5.6.0 的 blecontrolrequestchannel.cpp 组件中存在缓冲区溢出漏洞：由于 memcpy 对 64 字节缓冲区执行无界拷贝，攻击者可覆写任意函数指针。 当与相邻的 ThreadRunner::eventHandler 回调调用结合时，可可靠地劫持控制流，甚至执行模拟的 ROP...

CVE-2022-37709

Tesla Model 3 V11.02022.4.5.1 6b701552d7a6 Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authentication is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to open a door and drive the car away by leveraging...