CVE-2024-48290

An issue in the Bluetooth Low Energy implementation of Realtek RTL8762E BLE SDK v1.4.0 allows attackers to cause a Denial of Service DoS via supplying a crafted llterminateind packet...

PT-2024-10774 · Epson +1 · Epson Products +1

Name of the Vulnerable Software and Affected Versions: Lush 2 versions through 2020-02-25 Tk-star nan versions affected versions not specified Epson products versions affected versions not specified One2Track versions affected versions not specified Brother printers versions affected versions not...

CVE-2020-11921

An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device...

PT-2024-33072 · Realtek · Realtek Rtl8762E Ble Sdk

Name of the Vulnerable Software and Affected Versions: Realtek RTL8762E BLE SDK version 1.4.0 Description: The issue is related to the Bluetooth Low Energy implementation of the Realtek RTL8762E BLE SDK, which allows attackers to cause a Denial of Service DoS by supplying a crafted ll terminate i...

CVE-2024-48290

The CVE-2024-48290 entry concerns Realtek RTL8762E BLE SDK (v1.4.0). The vulnerability arises in the Bluetooth Low Energy implementation, where a crafted ll_terminate_ind packet can cause a Denial of Service. The available documents do not specify affected hardware revisions beyond RTL8762E BLE S...

The vulnerability of the Bluetooth Low Energy (BLE) technology in tool sets and libraries for setting up wireless connections provided by Cypress’ Bluetooth SDK allows a intruder to trigger a service failure.

The vulnerability of the Bluetooth Low Energy BLE technology, as well as the toolkits and libraries for configuring wireless connections in Cypress’ Bluetooth SDK, is related to the issue where an operation goes beyond the buffer boundaries in memory when processing the Length field of the Data...

CVE-2020-11921

CVE-2020-11921 affects Lush 2 (through 2020-02-25). The issue is the lack of Bluetooth traffic encryption, enabling an attacker to hijack an ongoing Bluetooth connection with a mobile phone and gain full control over the device. The CVSSv3.1 base score is 8.8 (HIGH). Remediation: update Lush 2 to...

Realtek RTL8762E BLE SDK 安全漏洞

The Realtek RTL8762E BLE SDK is a low-power Bluetooth 5 solution from China-based Realtek Semiconductor Realtek. A security vulnerability exists in the Realtek RTL8762E BLE SDK version v1.4.0, which originates from an attacker being able to trigger a denial of service DoS by providing a carefully...

Lovense Lush 安全漏洞

Lovense Lush is an application from Lovense, Inc. A security vulnerability exists in Lovense Lush 2 2020-02-25 and earlier versions, which stems from a lack of Bluetooth traffic encryption, where an ongoing Bluetooth connection with a cell phone could be hijacked, allowing an attacker to take ful...

CVE-2020-11921

An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device...

Update your Android: Google patches two zero-day vulnerabilities

Google has announced patches for several high severity vulnerabilities. In total, 51 vulnerabilities have been patched in November's updates, two of which are under limited, active exploitation by cybercriminals. If your Android phone shows patch level 2024-11-05 or later then the issues discusse...

SUSE CVE-2024-50124

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix UAF on isosocktimeout conn-sk maybe have been unlinked/freed while waiting for isoconnlock so this checks if the conn-sk is still valid by checking if it part of isosklist...

SUSE CVE-2024-50125

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on scosocktimeout conn-sk maybe have been unlinked/freed while waiting for scoconnlock so this checks if the conn-sk is still valid by checking if it part of scosklist...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from BluetoothAdapter contains an...

The vulnerability of the l2cap_sock_recv_cb() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2capsockrecvcb function in the net/bluetooth/l2capsock.c module of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the hci_enhanced_setup_sync() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hcienhancedsetupsync function in the net/bluetooth/hciconn.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

AZL-52461 CVE-2024-50125 affecting package kernel for versions less than 5.15.182.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on scosocktimeout conn-sk maybe have been unlinked/freed while waiting for scoconnlock so this checks if the conn-sk is still valid by checking if it part of scosklist...

DEBIAN-CVE-2024-50125

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on scosocktimeout conn-sk maybe have been unlinked/freed while waiting for scoconnlock so this checks if the conn-sk is still valid by checking if it part of scosklist...

CVE-2024-50124

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix UAF on isosocktimeout conn-sk maybe have been unlinked/freed while waiting for isoconnlock so this checks if the conn-sk is still valid by checking if it part of isosklist...

CVE-2024-50125

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on scosocktimeout conn-sk maybe have been unlinked/freed while waiting for scoconnlock so this checks if the conn-sk is still valid by checking if it part of scosklist...