Huawei HarmonyOS Buffer Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from an OOM vulnerability in the Bluetooth module, which could be exploited by an attacker ...

CVE-2022-46401

The Microchip RN4870 module firmware 1.43 and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112 accepts PauseEncReqPlainText before pairing is complete...

Google Android elevation of privilege vulnerability (CNVD-2023-01051)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is due to improper privilege validation in the Bluetooth module. An attacker can exploit the vulnerability to gain elevated privileges...

MediaTek chip buffer error vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the BT module of the MediaTek chips, which stems from a lack of boundary checking and out-of-range writes. This could lead to remote code execution without additional execute...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is due to improper privilege validation in the Bluetooth module. An attacker can exploit the vulnerability to gain elevated privileges...

CVE-2021-40013

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity...

CVE-2021-40016

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality...

CVE-2021-40013

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity...

Design/Logic Flaw

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality...

Design/Logic Flaw

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity...

CVE-2021-40016

The CVE-2021-40016 entry concerns an improper permission control vulnerability in the Bluetooth module. In the NVD records, the issue is described as affecting confidentiality when successfully exploited. The CVSS data shows two ratings: CVSS 2.0 with a base score of 3.3 (LOW) and CVSS 3.1 with a...

PT-2022-11138 · Unknown · Bluetooth Module

Name of the Vulnerable Software and Affected Versions: Bluetooth module affected versions not specified Description: The issue is related to improper permission control in the Bluetooth module. Successful exploitation of this issue will impact confidentiality. Recommendations: At the moment, ther...

CVE-2021-40013: Undefined Security Weakness

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity...

CVE-2021-40016: Undefined Security Weakness

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality...

PT-2022-11135 · Unknown · Bluetooth Module

Name of the Vulnerable Software and Affected Versions: Bluetooth module affected versions not specified Description: The issue is related to improper permission control in the Bluetooth module. Successful exploitation of this issue will affect integrity. Recommendations: At the moment, there is n...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RLSA-2022:1988 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fget: check that the fd still exists after getting a ref to it CVE-2021-4083 kernel: avoid cyclic entity chains due to malformed USB descriptors CVE-2020-0404 kernel: speculation on...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2022:1975 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: fget: check that the fd still exists after getting a ref to it CVE-2021-4083 kernel: avoid cyclic entity chains due to malformed U...

Qualcomm’s various products have code-related vulnerabilities

The Qualcomm QCA chip and the Qualcomm AR8035 are both products of Qualcomm Incorporated.The Qualcomm QCA chip is a Bluetooth module chip.The Qualcomm AR8035 is an integrated 10/100/1000 Gigabit Ethernet transceiver. A code issue vulnerability exists in multiple Qualcomm products that stems from...