CVE-2025-27840-WIP

CVE-2025-27840-WIP 针对 CVE-2025-27840 的进行中工作 CVE-2025-27840 概述 CVE-2025-27840 是一个中等级别漏洞（CVSS 6.8 ），影响乐鑫 ESP32 蓝牙芯片 ，该芯片已集成到全球超过 10 亿台物联网设备中。该缺陷涉及 29 条未记录的控制器接口（HCI）命令 ，可能实现未经授权的内存访问和设备控制。 🔧 关键技术细节 影响 ESP32 固件版本 2025-03-06 关键命令0xFC02 允许直接写入内存 利用该漏洞需要物理访问权限或特权权限 ⚠️ 潜在风险 设备伪造和未经授权的数据访问 网络横向渗透和持续性威胁...

CVE-2025-27840-WIP

CVE-2025-27840-WIP Un trabajo en curso para CVE-2025-27840 Resumen de CVE-2025-27840 CVE-2025-27840 es una vulnerabilidad de severidad media CVSS 6.8 que afecta a los chips Bluetooth ESP32 de Espressif, integrados en más de mil millones de dispositivos IoT en todo el mundo. La falla implica 29...

EUVD-2025-7816

Malicious code in bioql PyPI...

CVE-2025-27840

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 Write memory...

CVE-2025-27840

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 Write memory...

CVE-2025-27840

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 Write memory...

CVE-2025-27840: Hidden Functionality

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 Write memory...

CVE-2025-27840

CVE-2025-27840 concerns Espressif ESP32 family chips. The public materials describe 29 hidden HCI/debug commands (notably 0xFC02: Write memory) that are undocumented and could enable memory writes in affected devices. Espressif explicitly states these are internal debug commands not remotely acce...

Zephyr 缓冲区错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.3 and earlier versions that stems from not clearing global references to semaphores after synchronously sending HCI commands, which could allow a malicious HCI...

CVE-2023-0396

A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses...

Privilege escalation

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 400, SD 450, SD 410/12, SD 425, SD 430, SD...

CVE-2014-10054: Undefined Security Weakness

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 400, SD 450, SD 410/12, SD 425, SD 430, SD...