21896 matches found
The vulnerability of the Linux operating system’s Bluetooth kernel component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s Bluetooth kernel component is related to errors that occur after the release of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-23963
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists...
CVE-2024-23963: Improper Control of Generation of Code
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists...
The vulnerability of the mgmt_mesh_foreach() function in the net/bluetooth/mgmt_util.c module of operating systems running on Linux allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or cause service failures.
The vulnerability of the mgmtmeshforeach function in the net/bluetooth/mgmtutil.c module of Linux operating systems is related to iterating over an inappropriate list called mgmtpending, which contains elements of type struct mgmtpendingCmd instead of struct mgmtmeshtx. Exploiting this...
The vulnerability of the set_device_flags() function in the net/bluetooth/mgmt.c module of Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the setdeviceflags function in the net/bluetooth/mgmt.c module of Linux kernel relates to the unlocking of a mutex that has not been unlocked before. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the implementation of the Bluetooth Mesh technology in the net/bluetooth/mgmt.c module of Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or cause service failures.
The vulnerability of the runtimers function in the net/bluetooth/mgmt.c module of Linux operating systems is related to the use of memory after it is freed during the processing of the struct hcidev object. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
CVE-2024-23963 Alpine Halo9 Stack-based Buffer Overflow
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists...
CVE-2024-23963 Alpine Halo9 Stack-based Buffer Overflow
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists...
CVE-2024-23963
CVE-2024-23963 concerns Alpine Halo9 devices. The flaw is in the PBAP_DecodeVCARD function where insufficient validation of user-supplied data length before copying to a stack-based buffer allows a network-adjacent attacker who can pair a malicious Bluetooth device to execute code with root privi...
ROS-20250130-03
Vulnerability of ma35d1serialprobe function in drivers/tty/serial/ma35d1serial.c module of Nuvoton driver MA35D1 of the Linux operating system kernel is related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in...
Bluetooth: MGMT: Fix possible deadlocks
...
Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
...
Bluetooth: SCO: Fix UAF on sco_sock_timeout
...
Bluetooth: fix use-after-free in device_for_each_child()
...
Bluetooth: Call iso_exit() on module unload
...
Bluetooth: ISO: Fix multiple init when debugfs is disabled
...
Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
...
Bluetooth: ISO: Fix UAF on iso_sock_timeout
...
PT-2025-31667 · Alpine · Alpine Ilx-507
Name of the Vulnerable Software and Affected Versions: Alpine iLX-507 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required, specifically, the target mus...
ROS-20250128-07
A vulnerability in the HID Profile Human Interface Device interface of the Bluetooth protocol stack for the Linux BlueZ operating system is related to an access control flaw. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary commands...