CVE-2025-9558

CVE-2025-9558 involves an out-of-bounds write in the Zephyr PB-ADV handling. The vulnerability occurs in gen_prov_start() within pb_adv.c, where the full length of received data is copied into link.rx.buf without validating the data size, potentially leading to memory corruption. Affected softwar...

CVE-2025-9558 Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start

There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size...

CVE-2025-9558 Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start

There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size...

EUVD-2020-19105

Malware in sbrugna...

EUVD-2020-19102

Malware in sbrugna...

EUVD-2020-19104

Malware in sbrugna...

EUVD-2022-52662

Malicious code in bioql PyPI...

EUVD-2023-54129

Malicious code in bioql PyPI...

EUVD-2022-29659

Malicious code in bioql PyPI...

EUVD-2022-31085

Malicious code in bioql PyPI...

EUVD-2022-31084

Malicious code in bioql PyPI...

EUVD-2022-52896

Malicious code in bioql PyPI...

EUVD-2022-52895

Malicious code in bioql PyPI...

EUVD-2022-31086

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-26556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently...

Linux Distros Unpatched Vulnerability : CVE-2020-26559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device participating in the provisioning protocol to identify the...

Linux Distros Unpatched Vulnerability : CVE-2020-26560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, t...

CVE-2022-30904

In Bestechnic Bluetooth Mesh SDK BES2300 V1.0, a buffer overflow vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU...

CVE-2022-24893

ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK ESP-BLE-MESH, a memory corruption vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU. This can result in memory corruption...

CVE-2022-31364

Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA010705.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: affected function is lowertransportlayeronseg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound...