90 matches found
esp32_bluetooth_classic_sniffer
BrakTooth ESP32 BR/EDR アクティブスニファ/インジェクタ Bluetooth Classic向けのシンプルな「モニターモード」。ESP32 BT接続においてBR/EDRベースバンドパケットをスニッフィングまたはインジェクションします。 これはリバースエンジニアリングされたアクティブ BR/EDRスニファであり、ESP32パッチ適用フレームワークです。ESP32コントローラとリモートターゲット間のBluetooth（BT）BR/EDR相互作用を調査するために使用できます。 BTネットワーク（ピコネット）と相互作用しないパッシブ...
knob
README Key Negotiation Of Bluetooth KNOB 攻撃に関するリポジトリ。対象は Bluetooth BR/EDR および Bluetooth Low Energy です。 関連研究 Bluetooth 標準から標準準拠の 0-day 脆弱性へ HWIO20 Bluetooth および Bluetooth Low Energy における鍵ネゴシエーションダウングレード攻撃 TOPS20 Bluetooth の青: KNOB 攻撃の解説 CyberWire19 KNOB は壊れた: Bluetooth BR/EDR...
BlueToolkit
BR/EDR および BLE 向けの拡張可能な Bluetooth 脆弱性テストフレームワーク。 ドキュメント • インストール • 使用方法 • エクスプロイト • ハードウェア • TODO • 自動車評価 • Bluetooth リソース • ライセンス BlueToolkit は、Bluetooth Classic BR/EDR および Bluetooth Low Energy BLE 向けのモジュール式ブラックボックス Bluetooth セキュリティテストフレームワークです。半自動テストをサポートし、次の3つの主要モジュールを備えています: Recon : Bluetooth...
CVE-2026-81508
ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...
CVE-2026-81508
The ESF-IDF (Espressif Internet of Things Development Framework) versions 5.5.5 , 6.0.1 , and 6.1 are vulnerable to an out-of-bounds read in the BlueDroid A2DP sink function btc_a2dp_sink_handle_inc_media(). The root cause is that the function reads a timestamp field from a received media buffer ...
CVE-2026-15460
The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...
CVE-2026-15460 Missing channel-state validation in Zephyr Bluetooth Classic L2CAP receive path
The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...
EUVD-2026-75212
The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...
PT-2026-89182
The Bluetooth Classic BR/EDR L2CAP receive handler bt l2cap br recv in subsys/bluetooth/host/classic/l2cap br.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BT L2CAP CONNECTED state. A dynamic channel is assigned i...
CVE-2026-85218
A double stack-based buffer overflow was found in the BlueZ AVRCP controller implementation. A nearby BR/EDR peripheral can send a crafted AVRCP player-settings response that supplies an attacker-controlled attribute count, causing avrcplistplayerattributesrsp and avrcpgetcurrentplayervalue in...
SUSE CVE-2026-76922
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
EUVD-2026-63157
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
Linux Distros Unpatched Vulnerability : CVE-2026-76922
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76922 Note that Nessus relies on the...
DEBIAN-CVE-2026-76922
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
AZL-96836 CVE-2026-76922 affecting package wireshark 4.4.7-2
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76922
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
UBUNTU-CVE-2026-76922
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76922
Wireshark's Bluetooth BR/EDR FHS protocol dissector has a null pointer dereference causing a crash (DoS). Affected versions: 4.4.0–4.4.18 and 4.6.0–4.6.7. CVSS 5.5 (medium). No exploitation details provided. Upgrade to a patched version. See wnpa-sec-2026-80 for details.
