EUVD-2023-24091

Malicious code in bioql PyPI...

EUVD-2023-24090

Malicious code in bioql PyPI...

CVE-2023-1901

The bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI commands may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash DoS or potential RCE on the Host layer...

CVE-2023-2234 BT HCI host union variant confusion

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...

CVE-2023-1902

The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash DoS or potential RCE on the Host layer...

CVE-2023-1901: Out-of-bounds Write

The bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI commands may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash DoS or potential RCE on the Host layer...

CVE-2021-3329

Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack...

Stack overflow

Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack...

CVE-2021-3329

Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack...

CVE-2021-3329: Improper Check or Handling of Exceptional Conditions

Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack...

PT-2023-12203 · Unknown · Bluetooth Stack

Name of the Vulnerable Software and Affected Versions: Bluetooth stack affected versions not specified Description: The issue is related to a lack of proper validation in HCI Host stack initialization, which can cause a crash of the bluetooth stack. Recommendations: At the moment, there is no...

CVE-2021-3329

CVE-2021-3329 affects Zephyr RTOS Bluetooth stack: root cause is lack of proper validation in HCI Host stack initialization, specifically around ACL_MTU handling, which can crash the bluetooth stack. Some sources cite Zephyr v2.4.0 as vulnerable. Documented impact includes high availability risk ...