CVE-2025-48593

CVE-2025-48593 "단일 악성 패킷으로 기기를 장악할 수 있습니다." — Android 보안팀, 2025년 11월 Android 시스템블루투스 하위 시스템의 제로 클릭 원격 코드 실행 ⚠️ 중요 범위 설명 2026년 4월 업데이트 일반 휴대폰과 태블릿은 취약하지 않습니다. CVE-2025-48593은 스마트워치, 스마트 안경, 자동차 와 같이 블루투스 헤드폰/스피커 역할을 지원하는 Android 기기에만 영향을 미칩니다. 또한 공격자는 취약점을 악용하기 전에 피해자가 블루투스 페어링 요청을 수락 하도록 해야 합니다...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: Intel: sofsdw – handling errors during card registration. If card registration fails, usually due to deferred probes, the device properties added for headset codecs are not removed, which leads to kernel errors during...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdwrtsdcajackcommon: ctx-headsetcodecdev = NULL The function sofsdwRtsdcajackexit is used by different codecs, and some of them use the same interface name dai. For example, rt712 and rt713 both use...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Added missing delayed work cancellation for headset status. The call to canceldelayedworksync was missed, resulting in a use-after-free in corsairvoidremove...

CVE-2026-2671

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...

EUVD-2026-10185

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...

CVE-2026-2671

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...

CVE-2026-2671 Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...

CVE-2026-2671

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...

CVE-2026-2671 Mendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission

A vulnerability was detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. The attack can only be performed from the...

CVE-2026-2671

The CVE concerns Mendi Neurofeedback Headset V4. The vulnerability targets the Bluetooth Low Energy Handler, where a manipulation can cause cleartext transmission of sensitive information. Access is limited to the local network, with high attack complexity and a low likelihood of exploitation. No...

PT-2026-23879

Name of the Vulnerable Software and Affected Versions Mendi Neurofeedback Headset version V4 Description A vulnerability exists in the Bluetooth Low Energy Handler component of the Mendi Neurofeedback Headset V4, allowing for the cleartext transmission of sensitive information. The attack require...

Mendi Neurofeedback Headset 安全漏洞

The Mendi Neurofeedback Headset is a brain training device developed by the Swedish company Mendi. The Mendi Neurofeedback Headset V4 version has a security vulnerability, which stems from the Bluetooth low-power processor component transmitting sensitive information in plaintext...

EUVD-2022-54616

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt7-sdw: harden jackdetecthandler Realtek headset codec drivers typically check if the card is instantiated before proceeding with the jack detection. The rt700, rt711 and rt711-sdca are however missing a check on the card...

EUVD-2022-54615

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver...

EUVD-2020-24066

Malware in sbrugna...

EUVD-2006-6879

Malware in sbrugna...

EUVD-2025-5133

Malicious code in bioql PyPI...

EUVD-2022-30405

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-11586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected. CVE-2024-11586 Note that Nessus relies on the...