91 matches found
CVE-2025-48593
CVE-2025-48593 "A single malicious packet can own your device." — Android Security Team, Nov 2025 Zero-Click Remote Code Execution in Android System Bluetooth Subsystem ⚠️ Critical Scope Clarification Updated April 2026 Standard phones and tablets are NOT vulnerable. CVE-2025-48593 only affects...
Astra Linux – vulnerability in linux-5.15
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: handle errors on card registration If card registration fails, typically due to deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdwrtsdcajackcommon: ctx-headsetcodecdev = NULL The function sofsdwRtsdcajackexit is used by different codecs, and some of them use the same interface name dai. For example, rt712 and rt713 both use...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Added missing delayed work cancellation for headset status. The call to canceldelayedworksync was missed, resulting in a use-after-free in corsairvoidremove...
Asus Headset Driver Privilege Escalation
The vulnerability of the Asus Headset Driver and Asus Mouse Driver for controlling functions and settings of headsets and mice involves loading code without checking its integrity. Exploiting this vulnerability can allow an intruder to elevate their privileges to a SYSTEM level...
CVE-2026-2671
A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...
EUVD-2026-10185
A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...
CVE-2026-2671
A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...
CVE-2026-2671
A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...
CVE-2026-2671 Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission
A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...
CVE-2026-2671
The CVE concerns Mendi Neurofeedback Headset V4. The vulnerability targets the Bluetooth Low Energy Handler, where a manipulation can cause cleartext transmission of sensitive information. Access is limited to the local network, with high attack complexity and a low likelihood of exploitation. No...
CVE-2026-2671 Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission
A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...
CVE-2026-2671: Cleartext Transmission of Sensitive Information
A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...
PT-2026-23879
Name of the Vulnerable Software and Affected Versions Mendi Neurofeedback Headset version V4 Description A vulnerability exists in the Bluetooth Low Energy Handler component of the Mendi Neurofeedback Headset V4, allowing for the cleartext transmission of sensitive information. The attack require...
Mendi Neurofeedback Headset security vulnerabilities
The Mendi Neurofeedback Headset is a brain training device developed by the Swedish company Mendi. The Mendi Neurofeedback Headset V4 version has a security vulnerability, which stems from the Bluetooth low-power processor component transmitting sensitive information in plaintext...
EUVD-2022-54615
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver...
EUVD-2022-54616
In the Linux kernel, the following vulnerability has been resolved: ASoC: rt7-sdw: harden jackdetecthandler Realtek headset codec drivers typically check if the card is instantiated before proceeding with the jack detection. The rt700, rt711 and rt711-sdca are however missing a check on the card...
EUVD-2020-24066
Malware in sbrugna...