Input validation

In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote proximal, NFC escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no additional execution...

Input validation

In reassembleanddispatch of packetfragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution...

Google Android has an unspecified vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA.Bluetooth BR/EDR is a Bluetooth BR/EDR Basic Rate/Enhanced Data Rate standard from Google and the Open Handset Alliance OHA. COVIDSafe app is a coronavirus contact tracing application from Google a...

"Connection is unsuccessful" error when you connect a Bluetooth device to an application in Windows 8.1 or Windows RT 8.1

"Connection is unsuccessful" error when you connect a Bluetooth device to an application in Windows 8.1 or Windows RT 8.1 This article describes an issue that occurs when you connect a Bluetooth device to an application in Windows 8.1 or Windows RT 8.1. An update is available to fix this issue...

CVE-2019-20535

An issue was discovered on Samsung mobile devices with O8.x and P9.0 software. A connection to a new Bluetooth devices can be established from the lock screen. The Samsung ID is SVE-2019-15533 December 2019...

Information disclosure

In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permission check. This could lead to local information disclosure if a malicious app enables contacts over a bluetooth connection, with User execution privileges...

Serious Security Flaws Found in Children's Connected Toys

Various connected toys for children – hot off the shelves from this holiday shopping season – have been found with deep-rooted security issues, including missing authentication for device pairing and a lack of encryption for connected online accounts. The research, formed by a partnership between...

Talkie Bluetooth Video iFiles 2.0 iOS - Multiple Vulnerabilities

No description provided by source. Title: ====== Talkie Bluetooth Video iFiles 2.0 iOS - Multiple Vulnerabilities Date: ===== 2013-08-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1062 VL-ID: ===== 1063 Common Vulnerability Scoring System:...

CVE-2008-4295

Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service device reboot by configuring a Bluetooth device with a long h...

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

CVE-2006-0671

Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...