91 matches found
CVE-2023-2234 BT HCI host union variant confusion
Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...
Zephyr 安全漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr that originates from allowing any malicious BT controller to execute arbitrary code on the host...
PT-2023-18442 · Zephyr · Zephyr
Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue allows any malicious Bluetooth controller to execute arbitrary code on the Zephyr host due to union variant confusion. Recommendations: At the moment, there is no information about...
Zephyr 安全漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr version v2.4.0, which stems from invalid ACLMTU packets not being handled correctly during hci host stack initialization, and which can be exploited by an attacker...
zephyr 缓冲区错误漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in zephyr 3.2 and earlier versions, which stems from a malicious/flawed Bluetooth controller that causes buffer rereads to occur in most functions that handle HCI command...
CVE-2023-0397
A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in lereadbuffersizecomplete...
Design/Logic Flaw
A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in lereadbuffersizecomplete...
CVE-2023-0396: Buffer Over-read
A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses...
CVE-2023-0397 DoS: Invalid Initialization in le_read_buffer_size_complete
A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in lereadbuffersizecomplete...
CVE-2023-0397 DoS: Invalid Initialization in le_read_buffer_size_complete
A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in lereadbuffersizecomplete...
CVE-2023-0397: Improper Check or Handling of Exceptional Conditions
A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in lereadbuffersizecomplete...
CVE-2021-35129
Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...
PT-2022-10442 · Qualcomm · Qualcomm Snapdragon
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in the BT controller due to an improper length check while processing vendor-specific commands. This affects various Qualcomm Snapdrago...
kernel: race condition for removal of the HCI controller
A flaw was found in the Linux kernel’s handling of the removal of Bluetooth HCI controllers. This flaw allows an attacker with a local account to exploit a race condition, leading to corrupted memory and possible privilege escalation. The highest threat from this vulnerability is to...
kernel: race condition for removal of the HCI controller
A flaw was found in the Linux kernel’s handling of the removal of Bluetooth HCI controllers. This flaw allows an attacker with a local account to exploit a race condition, leading to corrupted memory and possible privilege escalation. The highest threat from this vulnerability is to...
kernel: race condition for removal of the HCI controller
A flaw was found in the Linux kernel’s handling of the removal of Bluetooth HCI controllers. This flaw allows an attacker with a local account to exploit a race condition, leading to corrupted memory and possible privilege escalation. The highest threat from this vulnerability is to...
kernel: race condition for removal of the HCI controller
A flaw was found in the Linux kernel’s handling of the removal of Bluetooth HCI controllers. This flaw allows an attacker with a local account to exploit a race condition, leading to corrupted memory and possible privilege escalation. The highest threat from this vulnerability is to...
kernel: race condition for removal of the HCI controller
A flaw was found in the Linux kernel’s handling of the removal of Bluetooth HCI controllers. This flaw allows an attacker with a local account to exploit a race condition, leading to corrupted memory and possible privilege escalation. The highest threat from this vulnerability is to...
kernel: race condition for removal of the HCI controller
A flaw was found in the Linux kernel’s handling of the removal of Bluetooth HCI controllers. This flaw allows an attacker with a local account to exploit a race condition, leading to corrupted memory and possible privilege escalation. The highest threat from this vulnerability is to...
kernel: race condition for removal of the HCI controller
A flaw was found in the Linux kernel’s handling of the removal of Bluetooth HCI controllers. This flaw allows an attacker with a local account to exploit a race condition, leading to corrupted memory and possible privilege escalation. The highest threat from this vulnerability is to...