507 matches found
CVE-2023-21739
CVE-2023-21739 Windows Bluetooth Driver Elevation of Privilege Vulnerability. authentication| complexity| vector ---|---|--- not available| not available| not available confidentiality| integrity| availability ---|---|--- not available| not available| not available CVSS Score: not available...
CVE-2026-98819
A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing Device Descriptor Configuration DDC records, the driver fails to properly validate record lengths, allowing integer wrapping and reading past buffer boundaries. An attacker capable of supplying crafted firmware data...
CVE-2026-98732
A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing hardware error events, the driver logs event data as a string without verifying that the received payload is properly null-terminated. A physically proximate attacker or compromised Bluetooth device could exploit this...
CVE-2026-78117 Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air
The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hciinfineonpsoc6bless.c stored the outgoing HCI packet descriptor in a file-scope variable, static cystcblehcitxpacketinfot hcitxpkt. psoc6blesssend cleared and populated that descriptor's packetType, dataLength and data fields before...
CVE-2026-78117 Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air
The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hciinfineonpsoc6bless.c stored the outgoing HCI packet descriptor in a file-scope variable, static cystcblehcitxpacketinfot hcitxpkt. psoc6blesssend cleared and populated that descriptor's packetType, dataLength and data fields before...
CVE-2026-78117
The Infineon PSOC 6 BLESS HCI driver (specifically in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c) is vulnerable to a race condition due to the use of a file-scope variable, static cy_stc_ble_hci_tx_packet_info_t hci_tx_pkt, to store outgoing HCI packet descriptors. Because psoc6_bless_send(...
Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10, Linux-6.1
A issue was discovered in the driver/bluetooth/hcildisc.c file within the Linux kernel 6.2. In hciuartttyioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. The HCIUARTPROTOSET function is called before hu-proto is set. A NULL pointer dereferencing may occur...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel before version 5.16.3, the driver/bluetooth/hciqca.c file misinterprets the return value of devmgpiodgetindexoptional. It expects the return value to be NULL in the error case, but in reality, it is an error pointer...
CVE-2026-96844
Integer underflow wrap or wraparound in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2026-83868
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83776
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-83760
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally...
CVE-2026-96844
An integer underflow (wrap or wraparound) exists in the Microsoft Bluetooth Driver , which can be leveraged by an authorized attacker to elevate privileges over an adjacent network. The vulnerability is associated with CWE-191 . While the base severity is rated as HIGH , specific exploitation det...
CVE-2026-83868
A race condition exists in the Microsoft Bluetooth Driver due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High), reflecting high impacts on conf...
CVE-2026-83760
An out-of-bounds read vulnerability exists in the Microsoft Bluetooth Driver . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside the intended memory boundaries. The vulnerability has a MEDIUM severity rating with a CVSS 3.1 score of 5.5, pri...
CVE-2026-83776
A vulnerability exists in the Microsoft Bluetooth Driver due to an out-of-bounds read (CWE-125). This flaw could allow an unauthorized attacker to elevate privileges by conducting a physical attack . Exploitation details and specific affected versions are not provided in the documents; however, a...
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...