EUVD-2021-20807

Malware in sbrugna...

CVE-2021-34145

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with an invalid Baseband packet type and LTADDRESS and LTADDR after completion of the LMP setup procedure, allowing attackers in radio range...

CVE-2021-34148

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service...

CVE-2021-34147

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing attackers to exhaust device BT resources and eventually...

CVE-2021-34147

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing attackers to exhaust device BT resources and eventually...

CVE-2021-34145

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with an invalid Baseband packet type and LTADDRESS and LTADDR after completion of the LMP setup procedure, allowing attackers in radio range...

PT-2021-4304

Name of the Vulnerable Software and Affected Versions Cypress WICED BT stack versions through 2.9.0 for CYW20735B1 Description The Bluetooth Classic implementation in the Cypress WICED BT stack does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple...

PT-2021-4358

Name of the Vulnerable Software and Affected Versions Cypress WICED BT stack versions through 2.9.0 for CYW20735B1 devices Description The Bluetooth Classic implementation in the Cypress WICED BT stack does not properly handle the reception of LMP max slot with a greater ACL Length after completi...

PT-2021-4305

Name of the Vulnerable Software and Affected Versions Cypress WICED BT stack versions through 2.9.0 for CYW20735B1 devices Description The Bluetooth Classic implementation in the Cypress WICED BT stack does not properly handle the reception of LMP max slot with an invalid Baseband packet type and...

CVE-2021-34148: Undefined Security Weakness

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service...