100 matches found
PT-2026-87074
An issue in the btm acl handle function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...
PT-2026-88220
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the btm sec encrypt change function within btm sec.cc allows for a downgrade attack. This issue enables remote information disclosure without...
Qualcomm WLAN Firmware Buffer Overflow
The vulnerability of the BTM Action Frame Handler component in Qualcomm’s embedded software lies in the fact that the operation data is written outside of the memory buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate the data...
Qualcomm Heap Buffer Overflow
The vulnerability of the BTM Action Frame Handler component in Qualcomm’s embedded software lies in the fact that the operation data is written outside of the memory buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate the data...
EUVD-2025-210213
In multiple functions of btmsec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-48571
In multiple functions of btmsec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
PT-2026-111211
Уязвимость функции btm acl handle микропрограммного обеспечения аудио-чипсетов Bestechnic BES2300 Bluetooth Audio SoC связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании путем отправки специально...
CVE-2024-43766
In multiple functions of btmblesec.cc, there is a possible unencrypted communication due to Invalid error handling. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-288144143
In multiple functions of btmblesec.cc, there is a possible unencrypted communication due to Invalid error handling. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2022-33284
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame...
com.adobe.api.platform:launchpad (>=1.1.11, <=1.3.7), com.adobe.api.platform:launchpad-test-support (>=1.1.11, <=1.3.7) +21 more potentially affected by CVE-2024-3884 via io.undertow:undertow-core (1.1.0.final)
io.undertow:undertow-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.adobe.api.platform:launchpad =1.1.11, =1.1.11, =0.9.0.final, =0.9.0.final, =0.9.0.final,...
EUVD-2022-36327
Malicious code in bioql PyPI...
EUVD-2024-37305
Malicious code in bioql PyPI...
EUVD-2023-37251
Malicious code in bioql PyPI...
EUVD-2023-37271
Malicious code in bioql PyPI...
EUVD-2025-20487
Malicious code in bioql PyPI...
CVE-2025-21446
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests...
CVE-2025-21446
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests...
CVE-2025-21446 Buffer Over-read in WLAN Firmware
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests...
CVE-2025-21446
CVE-2025-21446 affects Qualcomm chipsets where WLAN frame processing for BTM requests can trigger a transient Denial-of-Service when parsing vendor-specific information elements. The root cause is improper handling of vendor IEs in the WLAN firmware during BTM parsing, leading to resource exhaust...