CVE-2025-20672

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292...

CVE-2025-20677

The CVE-2025-20677 entry describes a vulnerability in the Bluetooth driver (MediaTek) where an uncaught exception can cause a system crash, leading to local denial of service with low-privilege, no user interaction required. The impact is explicitly rated as Availability HIGH with Local attack ve...

CVE-2025-20677

In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412256; Issue ID: MSV-3284...

CVE-2025-20677

In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412256; Issue ID: MSV-3284...

CVE-2025-20672

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292...

CVE-2025-20672

CVE-2025-20672 affects MediaTek Bluetooth driver components, with an out-of-bounds write caused by an incorrect bounds check. The vulnerability could enable local privilege escalation to a user context without user interaction, as indicated across multiple sources. The issue specifies that user p...

CVE-2025-20672

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292...

PT-2025-23457 · Realtek · Bluetooth Hci Adaptor

Name of the Vulnerable Software and Affected Versions: Bluetooth HCI Adaptor from Realtek affected versions not specified Description: The issue allows local attackers with regular privileges to create a symbolic link with the same name as a specific file, causing the product to delete arbitrary...

Realtek Bluetooth HCI Adaptor 后置链接漏洞

Realtek Bluetooth HCI Adaptor is a Bluetooth driver from China-based Realtek Semiconductor Realtek. A backlink vulnerability exists in Realtek Bluetooth HCI Adaptor, which stems from a link-following issue that could lead to arbitrary file deletion and elevation of privilege...

ROS-20250602-01

A vulnerability in the Bluetooth component of the Linux kernel is related to a memory leak in the function hcigetrandomaddress in net/bluetooth/hcisync.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the traceeventshist component of the...

PT-2025-23448 · Intel · Intel Bluetooth Driver

Name of the Vulnerable Software and Affected Versions: Intel Bluetooth driver affected versions not specified Description: The issue is related to an incorrect bounds check in the Bluetooth driver, which could lead to a possible out of bounds write. This could result in local escalation of...

PT-2025-23453 · Unknown · Bluetooth Driver

Name of the Vulnerable Software and Affected Versions: Bluetooth driver affected versions not specified Description: The issue is related to a possible system crash due to an uncaught exception in the Bluetooth driver, which could lead to local denial of service. User execution privileges are...

Google Pixel Information Disclosure Vulnerability (CNVD-2025-11247)

Google Pixel is a smartphone from the American company Google Google. Google Pixel has an information disclosure vulnerability that can be exploited by an attacker to cause Bluetooth adapter details to be disclosed...

CVE-2024-56193

There is a possible disclosure of Bluetooth adapter details due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

USN-7516-9 linux-aws vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

USN-7516-7 linux-aws-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

USN-7513-5 linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - x86 architecture; - Block layer subsystem; - Compute Acceleration Framework; - ACPI drivers;...

CVE-2025-35003

Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bluetooth Stack HCI and UART components that may result in system crash, denial of service, or arbitrary code execution, after receiving...

USN-7521-3 linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Serial ATA and Parallel...

CVE-2024-56193

There is a possible disclosure of Bluetooth adapter details due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...