MAL-2025-14244 Malicious code in alb-um-availa-ble-zip-mp3-file-197627-the-performer-rijx3-aoduph (npm)

The package alb-um-availa-ble-zip-mp3-file-197627-the-performer-rijx3-aoduph was found to contain malicious code...

Malicious code in alb-um-availa-ble-zip-mp3-file-6701-black-monk-time-a72gt-xmggfd (npm)

The package alb-um-availa-ble-zip-mp3-file-6701-black-monk-time-a72gt-xmggfd was found to contain malicious code...

MAL-2025-14252 Malicious code in alb-um-availa-ble-zip-mp3-file-87774-sweet-and-dandy-u8y37-xsfuaz (npm)

The package alb-um-availa-ble-zip-mp3-file-87774-sweet-and-dandy-u8y37-xsfuaz was found to contain malicious code...

MAL-2025-14254 Malicious code in alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv (npm)

The package alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv was found to contain malicious code...

Malicious code in @zalastax/nolb-ble (npm)

The package @zalastax/nolb-ble was found to contain malicious code...

Malicious code in alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun (npm)

The package alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun was found to contain malicious code...

Malicious code in alb-um-availa-ble-zip-mp3-file-470382-acts-of-god-a6hb1-jgniqs (npm)

The package alb-um-availa-ble-zip-mp3-file-470382-acts-of-god-a6hb1-jgniqs was found to contain malicious code...

Malicious code in alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv (npm)

The package alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv was found to contain malicious code...

MAL-2025-14250 Malicious code in alb-um-availa-ble-zip-mp3-file-54131-not-for-threes-53dbe-butthc (npm)

The package alb-um-availa-ble-zip-mp3-file-54131-not-for-threes-53dbe-butthc was found to contain malicious code...

MAL-2025-14255 Malicious code in alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy (npm)

The package alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy was found to contain malicious code...

CVE-2025-54646

Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...

CVE-2025-54646

Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...

CVE-2025-54646

The CVE-2025-54646 entry concerns Huawei HarmonyOS/EMUI with an inadequate packet length check in the BLE module. The root cause is a faulty packet length validation in the BLE component, leading to potential performance impact when exploited. Public data provides two CVSS vectors: NVD’s CVSSv3.1...

CVE-2025-54646

Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...

CVE-2025-54646

Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...

PT-2025-32090 · Unknown · Ble Module

Name of the Vulnerable Software and Affected Versions: BLE module affected versions not specified Description: The vulnerability is due to an inadequate packet length check in the BLE module. Successful exploitation may affect performance. Recommendations: At the moment, there is no information...

CVE-2025-44559

An issue in the Bluetooth Low Energy BLE stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

PT-2025-27243 · Realtek · Realtek Rtl8762E Ble Sdk

Name of the Vulnerable Software and Affected Versions: Realtek RTL8762E BLE SDK version 1.4.0 Description: The issue in the Bluetooth Low Energy BLE stack allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

CVE-2025-32876

An issue was discovered on COROS PACE 3 devices through 3.0808.0. The BLE implementation of the COROS smartwatch does not support LE Secure Connections and instead enforces BLE Legacy Pairing. In BLE Legacy Pairing, the Short-Term Key STK can be easily guessed. This requires knowledge of the...

CVE-2025-32875

An issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing and bonding is neither initiated nor enforced by the application itself. Also, the watch does not enforce pairing and bonding. As a result, any data transmitted via BLE remains unencrypted, allowing...