Microchip RN4870 安全漏洞

The Microchip RN4870 is a Bluetooth low power module chip from Microchip, Inc. A security vulnerability exists in the Microchip RN4870 module firmware version 1.43, which originates from accepting PauseEncReqPlainText before pairing is complete, the low-power Bluetooth implementation enters a...

Microchip RN4870 安全漏洞

The Microchip RN4870 is a Bluetooth low energy module chip from Microchip, Inc. A security vulnerability exists in Microchip RN4870 module firmware version 1.43, which is caused by ConReqTimeoutZero unresponsiveness, and can be exploited by an attacker to cause a covert denial of service over...

Contiki-NG 代码问题漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A code issue vulnerability exists in versions of Contiki-NG prior to 4.9, which stems from the inclusion of a Bluetooth low-power stack that can be exploited by an attacker to inject...

Design/Logic Flaw

The Samsung TV 2021 and 2022 model smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models...

EUVD-2022-25671

In avdtmsgasmbl of avdtmsg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2022-20468

In BNEPConnectResp of bnepapi.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20469

In avctlcbmsgasmbl of avctlcbact.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-14686 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible out of bounds read in the BNEP ConnectResp function of bnep api.cc. This could lead to local information disclosure over Bluetooth without requirin...

CVE-2022-25837

Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at least one device supports BR/EDR Secure Connections pairing and the other BR/EDR Legacy PIN code pairing if the MITM...

PT-2022-5920 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Bluetooth Core Specification versions 1.0B through 5.3 Linux kernel affected versions not specified Description: The issue concerns Bluetooth pairing and may allow an unauthenticated Man-In-The-Middle MITM attacker to acquire credentials when...

PT-2022-36604 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.333 Description: The issue concerns an attempt to access uninitialized memory in the Bluetooth L2CAP component. The actual impact and potential for attack have not been proven yet. Recommendations: For Linu...

Important: kernel

Issue Overview: A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fibnhmatch of the file net/ipv4/fibsemantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is...

Design/Logic Flaw

There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2capcore.c's l2capconnect and l2capleconnectreq functions which may allow code execution and leaking kernel memory respectively remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via...

CVE-2022-42895

There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2capcore.c's l2capparseconfreq function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e...

The vulnerability of the net/bluetooth/hci_event.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/bluetooth/hcievent.c component in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the l2cap_recv_acldata() function (net/bluetooth/l2cap_core.c) in Linux operating system kernels, allowing a hacker to trigger a service failure

The vulnerability of the l2caprecvacldata function net/bluetooth/l2capcore.c in Linux operating systems is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Vulnerability of the l2cap_reassemble_sdu() function (net/bluetooth/l2cap_core.c) in Linux kernel, allowing a attacker to execute arbitrary code

The vulnerability of the l2capreassemblesdu function net/bluetooth/l2capcore.c in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2022-6665 · Mediatek +1 · Mediatek Mt8175 +3

Name of the Vulnerable Software and Affected Versions: Android devices based on MediaTek MT8167, MT8175, and MT8183 chips affected versions not specified Description: The issue is related to a possible out of bounds read in Bluetooth due to a missing bounds check. This could lead to local...

UBUNTU-CVE-2022-3640

A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2capconndel of the file net/bluetooth/l2capcore.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of...

DEBIAN-CVE-2022-3619

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function l2caprecvacldata of the file net/bluetooth/l2capcore.c of the component Bluetooth. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue...