UBUNTU-CVE-2018-9363

In the hidpprocessreport in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream...

Security News: Bluetooth Bug Triggers Patch Frenzy, as Ransomware Attack Hits Global Shipper

A scary Bluetooth bug. A crippling ransomware attack. A cyber threat to the U.S. electrical grid. A data leak of trade secrets from major car makers such as Tesla and GM. These were some of the security industry news that caught our eye last week. Bluetooth vulnerability rattles vendors, end user...

New Bluetooth Hack Affects Millions of Devices from Major Vendors

Yet another bluetooth hacking technique has been uncovered. A highly critical cryptographic vulnerability has been found affecting some Bluetooth implementations that could allow an unauthenticated, remote attacker in physical proximity of targeted devices to intercept, monitor or manipulate the...

The vulnerability of the Bluetooth component of the Mac OS X operating system allows a hacker to disclose sensitive information about the kernel’s memory allocation scheme.

The vulnerability of the Bluetooth component in the Mac OS X operating system is related to the incorrect implementation of security mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information about the kernel’s memory allocation scheme through a specially...

CVE-2016-6549 Zizai Tech Nut allows for unauthenticated Bluetooth pairing

The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute...

Code injection

The Trackr device ID is constructed of a manufacturer identifier of four zeroes followed by the BLE MAC address in reverse. The MAC address can be obtained by being in close proximity to the Bluetooth device, effectively exposing the device ID. The ID can be used to track devices. Updated apps,...

CVE-2018-4215

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to gain privileges or cause a denial of service buffer overflow via a crafted app...

The vulnerability of the avrc_ctrl_pars_vendor_rsp function (bluetooth avrcp_ctrl) in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the avrcctrlparsvendorrsp function bluetooth avrcpctrl in the Android operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2018-12652)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android Kernel component bluetooth. An attacker can exploit this vulnerability to achieve elevation of privilege...

Apple iOS Buffer Overflow Vulnerability (CNVD-2018-12190)

Apple iOS is an operating system for mobile devices developed by Apple Inc. Bluetooth is one of the components of Bluetooth. A security vulnerability exists in the Bluetooth component of Apple iOS prior to version 11.4. The vulnerability can be exploited by an attacker to gain elevated privileges...

Multiple BMW Vehicle Head Unit HU_NBT Component Design Vulnerabilities (CNVD-2018-11272)

BMW i Series, etc. are different series of automobile products of BMW Bayerische Motoren Werke AG, Germany.Head Unit HUNBT Infotainment component is a set of infotainment system of the system. A security vulnerability exists in the Head Unit HUNBT component on a number of BMW vehicles vehicles...

About the security content of iOS 11.4

About the security content of iOS 11.4 This document describes the security content of iOS 11.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

CVE-2018-9119

An attacker with physical access to a BrilliantTS FUZE card MCU firmware 0.1.73, BLE firmware 0.7.4 can unlock the card, extract credit card numbers, and tamper with data on the card via Bluetooth because no authentication is needed, as demonstrated by gatttool...

CVE-2017-13269

A information disclosure vulnerability in the Android system bluetooth. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68818034...

CVE-2017-13268

A information disclosure vulnerability in the Android system bluetooth. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67058064...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-07449)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in avrcctrlparsvendorrsp in bluetooth avrcpctrl in Android, which stems from a lack of boundary detection in the program. A remote...

The vulnerability of the Bluetooth component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Bluetooth component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a perpetrator to execute arbitrary code within the context of a privileged process using a specially crafted file...

SUSE-SU-2018:0266-1 Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606457 fixes several issues. The following security issues were fixed: - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a...

SUSE-SU-2018:0270-1 Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606463 fixes several issues. The following security issues were fixed: - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:0244-1)

This update for the Linux Kernel 3.12.61-5277 fixes one issue. The following security issues were fixed : - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a crafted...