CVE-2018-16270

The CVE concerns Samsung Galaxy Gear series prior to build RE2, where the hcidump utility lacks privilege/permission restrictions. The vulnerability allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path, indicating exposure of sensitive Bluetooth data. The provide...