CVE-2025-15474

BLE 智能锁拒绝服务（DoS）漏洞 未经认证的蓝牙低功耗（BLE）连接洪泛攻击可以可靠地阻止合法用户解锁设备，方法是中断键盘输入并强制反复进入锁定状态。 📌 摘要 本仓库记录了一个影响商用 BLE 智能挂锁的拒绝服务（DoS）漏洞 （亚马逊商品）。 该设备公开一个静态 BLE MAC 地址（无 RPA）并接受未经认证的连接尝试。 通过循环反复发起 BLE 连接，攻击者可以干扰锁具的键盘认证流程，阻止用户完成 PIN 码输入。 此行为并非由错误的密码尝试导致 —— 用户在被强制进入锁定状态之前，没有足够的时间输入 PIN 码。 🔥 影响 ❌ 阻止合法用户解锁设备 ⛔ 键盘在输入过程中无响...

Heap-based Buffer Overflow

libzephyr.so is vulnerable to a Heap-based Buffer Overflow. The vulnerability is due to inadequate validation of buffer lengths in BLE connection update operations, which could lead to a divide by zero condition...

CVE-2023-30698

Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege...

CVE-2023-30698

Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege...

CVE-2023-30698

Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege...