1766 matches found
PT-2025-25254 · Sony · Sony Xav-Ax8500
Name of the Vulnerable Software and Affected Versions: Sony XAV-AX8500 affected versions not specified Description: The issue is related to an integer overflow in Bluetooth packet handling, which can lead to remote code execution. This was demonstrated at Pwn2Own. Recommendations: At the moment,...
(Pwn2Own) Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the...
(Pwn2Own) Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the...
PT-2025-25259 · Sony · Sony Xav-Ax8500
Name of the Vulnerable Software and Affected Versions: Sony XAV-AX8500 affected versions not specified Description: The issue concerns a Bluetooth ERTM Channel Authentication Bypass. It was discovered by Mikhail Evdokimov from PCAutomotive. Recommendations: At the moment, there is no information...
RealTek Bluetooth Driver Privilege Escalation Vulnerability - Lenovo Support US
No description provided...
CVE-2025-41657 AUMA: Incorrect delivery status of the Bluetooth configuration
Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker...
AUMA PROFOX和AUMA AC1.2 安全漏洞
AUMA PROFOX and AUMA AC1.2 are both products of AUMA, Inc.AUMA PROFOX is a professional-grade laboratory automation system for sample handling and liquid workstation control.AUMA AC1.2 is an adaptive controller. AUMA PROFOX and AUMA AC1.2 have a security vulnerability that stems from an...
SUSE-SU-2025:01839-1 Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-1506001017 fixes several issues. The following security issues were fixed: - CVE-2025-21680: pktgen: Avoid out-of-bounds access in getimixentries bsc1236701. - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmtremoveadvmonitorsync...
CVE-2025-20991
Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable...
CVE-2025-20991
CVE-2025-20991 affects Android Bluetooth components, where improper export of Android application components enables local attackers to make devices discoverable. The issue is tied to Samsung/Android deployments prior to SMR Jun-2025 Release 1. Root cause: improper component export in Bluetooth h...
CVE-2024-11857
Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary fil...
The vulnerability of the Linux operating system’s kernel Bluetooth component, which allows a hacker to gain elevated privileges
The vulnerability of the Linux operating system’s Bluetooth kernel component is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...
Google Pixel Security Breach
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that originates in the Bluetooth Bluetooth component of the device and could lead to elevation of privileges...
CVE-2024-11857 Realtek Bluetooth HCI Adaptor - Privilege Escalation
Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary fil...
PT-2025-23457 · Realtek · Bluetooth Hci Adaptor
Name of the Vulnerable Software and Affected Versions: Bluetooth HCI Adaptor from Realtek affected versions not specified Description: The issue allows local attackers with regular privileges to create a symbolic link with the same name as a specific file, causing the product to delete arbitrary...
Google Pixel Information Disclosure Vulnerability (CNVD-2025-11247)
Google Pixel is a smartphone from the American company Google Google. Google Pixel has an information disclosure vulnerability that can be exploited by an attacker to cause Bluetooth adapter details to be disclosed...
PT-2025-22888 · Apache · Apache Nuttx
Name of the Vulnerable Software and Affected Versions: Apache NuttX versions 7.25 through 12.9.0 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bluetooth Stack HCI and UART...
CVE-2024-30417
Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-27225
In sendHciCommand of bluetoothhci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...