Malicious code in blekit (npm)

Source: amazon-inspector ce64fb8d6264bfc9affaf6b3544637cb8559b232075b70a48144e5f1c1743020 blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module consoleApp/initializeLogger/getCurrentStatus from dist/src/handlelogs.mjs that POSTs any string passed to it to...

CVE-2025-44559

An issue in the Bluetooth Low Energy BLE stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

CVE-2025-44559: Uncontrolled Resource Consumption

An issue in the Bluetooth Low Energy BLE stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

CVE-2024-48290: Improper Validation of Specified Quantity in Input

An issue in the Bluetooth Low Energy implementation of Realtek RTL8762E BLE SDK v1.4.0 allows attackers to cause a Denial of Service DoS via supplying a crafted llterminateind packet...

PT-2024-33072 · Realtek · Realtek Rtl8762E Ble Sdk

Name of the Vulnerable Software and Affected Versions: Realtek RTL8762E BLE SDK version 1.4.0 Description: The issue is related to the Bluetooth Low Energy implementation of the Realtek RTL8762E BLE SDK, which allows attackers to cause a Denial of Service DoS by supplying a crafted ll terminate i...

CVE-2019-19194

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key LTK if an out-of-order link-layer encryption request...

CVE-2019-19196

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices accepts a pairing request with a key size greater than 16 bytes, allowing an...

Buffer overflow

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices accepts a pairing request with a key size greater than 16 bytes, allowing an...

Design/Logic Flaw

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key LTK if an out-of-order link-layer encryption request...

CVE-2019-19194

The CVE-2019-19194 issue affects Telink Semiconductor BLE SDKs (TLSR8x5x up to 3.4.0; TLSR823x up to 1.3.0; TLSR826x up to 3.3) when Secure Connections pairing is in use. The Bluetooth Low Energy SMP implementation can install a zero long-term key (LTK) if an out-of-order link-layer encryption re...

CVE-2019-19194

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key LTK if an out-of-order link-layer encryption request...

CVE-2019-19196

The CVE-2019-19196 entry relates to Telink Semiconductor’s BLE SDK SMP implementation. Affected SDKs (before Nov 2019) include TLSR8x5x (up to v3.4.0), TLSR823x (up to v1.3.0), and TLSR826x (up to v3.3). The vulnerability arises when a pairing request with a key size greater than 16 bytes is acce...

CVE-2019-19196

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices accepts a pairing request with a key size greater than 16 bytes, allowing an...

CVE-2019-19194: Undefined Security Weakness

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key LTK if an out-of-order link-layer encryption request...

CVE-2019-19196: Buffer Copy without Checking Size of Input

The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices accepts a pairing request with a key size greater than 16 bytes, allowing an...

PT-2020-10083

Name of the Vulnerable Software and Affected Versions Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0 Telink Semiconductor BLE SDK versions before November 2019 for TLSR823x through 1.3.0 Telink Semiconductor BLE SDK versions before November 2019 for TLSR826x...

PT-2020-10085

Name of the Vulnerable Software and Affected Versions Telink Semiconductor BLE SDK versions prior to November 2019 for TLSR8x5x through 3.4.0 Telink Semiconductor BLE SDK versions prior to November 2019 for TLSR823x through 1.3.0 Telink Semiconductor BLE SDK versions prior to November 2019 for...