CVE-2026-113060

Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113060

Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113005

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a memory corruption flaw within the Bluetooth component. A remote attacker can exploit this vulnerability by serving a crafted HTML page to potentially execute arbitrary code inside the browser sandbox. The vulnerability is associate...

CVE-2026-113005

Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113005

Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113131

Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113131

Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113131

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a memory corruption flaw within the Bluetooth component. A remote attacker can exploit this vulnerability by using a crafted HTML page to achieve arbitrary code execution inside the sandbox. The vulnerability is categorized as a CWE-...

CVE-2026-113310

Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113310

Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113310

An out-of-bounds read vulnerability exists in the Bluetooth component of Google Chrome (specifically within chromium-browser ) prior to version 156.0.8078.47 . A remote attacker can exploit this flaw by enticing a user to view a crafted HTML page , which allows the attacker to read memory inside ...

kernel: Bluetooth: hci_sync: Fix advertising data UAFs

A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, the hcisync component, which manages Bluetooth advertising data, is susceptible to a Use-After-Free UAF vulnerability. This occurs when a pointer to advertising data becomes invalid but is still accessed, particularly durin...

kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close

A flaw was found in the Bluetooth hcisync component of the Linux kernel. When the hcidevclosesync function is called during a device reset, the system may experience queuing timeouts. This occurs because the HCICMDDRAINWORKQUEUE flag is not properly set, which can lead to system instability or a...

fragattacks

FragAttacks: Fragmentation & Aggregation Attacks 1. Introduction This repository contains the FragAttacks tool. It can test Wi-Fi clients and access points for fr agmentation and ag gregation attacks. These vulnerabilities affect all protected Wi-Fi networks. For more information about these...

ATFuzzer

ATFuzzer "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" is accepted to the 35th Annual Computer Security Applications Conference ACSAC 2019. https://syed-rafiul-hussain.github.io/wp-content/uploads/2019/11/atfuzz.pdf Abstract This paper focuses ...

system_bt_AOSP10_r33_CVE-2020-0471

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

BadBlue

BadBlue Windows CVE-2024-21306 BadBlue implementation Using DuckyScript Unauthenticated Peering Leading to Code Execution Using HID Keyboard This is an implementation of the CVE discovered by marcnewlin And some code from BlueDucky Introduction BadBlue is a powerful tool for exploiting a...

crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

CVE-2017-0785

CVE-2017-0785 PoC This is just a personal study based on the Android information leak vulnerability released by Armis. Further reading: https://www.armis.com/blueborne/ To run, be sure to have pybluez and pwntools installed. sudo apt-get install bluetooth libbluetooth-dev sudo pip install pybluez...

CVE-2026-93209

A flaw was found in the Linux kernel's Bluetooth subsystem. Under conditions of memory pressure, a function responsible for handling Bluetooth commands can fail to properly track command completion. This can lead to intermittent failures when enabling Bluetooth, resulting in a denial of service...