76 matches found
CVE-2023-21457
Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Bluetooth without related permission...
PT-2022-14669 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read due to a use after free in the PAN WriteBuf function of pan api.cc. This could lead to remote information disclosure over Bluetooth with no...
PT-2022-21601 · Apple · Airpods +4
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16.1 Description: The issue allowed apps with Bluetooth access to record audio using connected AirPods, potentially capturing conversations with Siri and background sound. This was possible...
CVE-2022-32783
A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An app may gain unauthorized access to Bluetooth...
CVE-2022-32783
A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An app may gain unauthorized access to Bluetooth...
CVE-2022-32783
A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An app may gain unauthorized access to Bluetooth...
Apple macOS Monterey 安全漏洞
Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey suffers from a logic error vulnerability that stems from a logic error issue in the application, which can be exploited by an attacker to gain unauthorized Bluetooth...
PT-2022-21463 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 Description: A logic issue was addressed with improved checks, which may allow an app to gain unauthorized access to Bluetooth. Recommendations: For versions prior to 12.4, update to macOS Monterey 12.4 to resolve...
PT-2022-15061 · Electron · Electron
Name of the Vulnerable Software and Affected Versions: Electron versions prior to 17.0.0-alpha.6 Electron versions prior to 16.0.6 Electron versions prior to 15.3.5 Electron versions prior to 14.2.4 Electron versions prior to 13.6.6 Description: A vulnerability in Electron allows renderers to...
USN-5018-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the virtual file system implementation in the Linux kernel contained an unsigned to signed integer conversion error. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-33909 Piotr Krysiuk discovered that the eBPF...
USN-5017-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
It was discovered that the virtual file system implementation in the Linux kernel contained an unsigned to signed integer conversion error. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-33909 It was discovered that the bluetooth...
Design/Logic Flaw
An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved...
PT-2020-11391 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions 8.0 through 10 Description: The issue is related to a possible out of bounds write due to an incorrect bounds calculation in the Bluetooth stack, which could lead to remote code execution over Bluetooth with no additional...
Denial of service
A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to block Bluetooh access Android Bug ID A-28672558...
OPENSUSE-SU-2019:2544-1 Security update for chromium
This update for chromium to version 78.0.3904.108 fixes the following issues: - Chromium was updated to 78.0.3904.108 boo1157269 Security issues fixed: - CVE-2019-13723: Fixed a use-after-free in Bluetooth - CVE-2019-13724: Fixed an out of bounds access in Bluetooth...
Unspecified Vulnerability in Nestle Nespresso Prodigio
The Nestle Nespresso Prodigio is a smart coffee maker from the Swiss company Nestle. A security vulnerability exists in the Nestle Nespresso Prodigio device. An attacker can exploit the vulnerability to connect to the device via Bluetooth...
CVE-2018-14934
The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone...
PT-2018-18867 · Brilliantts · Brilliantts Fuze Card
Name of the Vulnerable Software and Affected Versions: BrilliantTS FUZE card MCU firmware 0.1.73, BLE firmware 0.7.4 Description: The issue allows an attacker with physical access to unlock the card, extract credit card numbers, and tamper with data on the card via Bluetooth, as no authentication...
Lemur Vehicle Monitors BlueDriver LSB2 does not authenticate users for Bluetooth access
Overview The Lemur Vehicle Monitors BlueDriver is an aftermarket automotive device that connects to a vehicle's OBD-II port and provides information about the vehicle's performance. The BlueDriver does not require a PIN for Bluetooth access, which allows anyone in range to send arbitrary commands...
