CVE-2020-36602

CVE-2020-36602 affects Huawei headset products. The vulnerability is an out-of-bounds read and write caused by insufficient validation of certain message parameters in affected firmware. An unauthenticated attacker with physical access can craft a malformed message and send it to the device, pote...

CVE-2020-36602

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

CVE-2020-36602

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

PT-2022-4598 · Huawei · Huawei Headset

Name of the Vulnerable Software and Affected Versions: Huawei headset products affected versions not specified Description: The issue concerns an out-of-bounds read and write vulnerability. An attacker, with physical access to the device, can craft a malformed message with a specific parameter an...

Security Advisory - Out-of-bounds Read and Write Vulnerability in Some Huawei Headset Products

There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be...

A week in security (August 30 – September 5)

Last week on Malwarebytes Labs ProxyToken: another nail-biter from Microsoft Exchange Macs turn on apps signed by Symantec, treat them as malware Google Play sign-ins can be abused to track another person’s movements FTC bans SpyFone and its CEO from continuing to sell stalkerware BrakTooth...

Is it game over for VR advergaming?

We’ve been warning about advergaming—the combination of virtual reality VR and ads—for years on the Labs Blog. I’ve given a few talks on the subject too, and how ad networks will slowly work their way into enclosed spaces formerly reserved for your head. They still might, but thanks to a recent...

SUSE-SU-2020:0836-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8647: Fixed a use-after-free in the vcdoresize function in drivers/tty/vt/vt.c bsc1162929. - CVE-2020-8649: Fixed a use-after-free in the...

openSUSE Security Update : the Linux Kernel (openSUSE-2019-2444)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-16995: A memory leak exits in hsrdevfinalize in net/hsr/hsrdevice.c. if hsraddport fails to add a port, which may cause denial of service, aka CID-6caabe7f197d...

Mind-Reader Headset Transfers Your Thoughts On Screen with 90% Accuracy

By Carolina MIT Media Lab researchers call it AlterEgo headset. Though it sounds This is a post from HackRead.com Read the original post: Mind-Reader Headset Transfers Your Thoughts On Screen with 90% Accuracy...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-1062) (BlueBorne)

The openSUSE Leap 42.2 kernel was updated to 4.4.87 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel BlueZ was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration...

Konftel 300IP SIP-based Conference Phone - Remote Bypass Reboot

Exploit for hardware platform in category dos / poc The Konftel 300IP is a flexible SIP-based conference phone, perfect for companies that use IP voice services. Its clear, natural sound comes from OmniSound HD, Konftel’s patented wideband audio technology. The stylishly designed Konftel 300IP is...

Hardware based malware steals contacts from all mobile platforms using only the Audio Jack!

Indian Security Research Atul Alex presented his surprise paper at the International Malware Conference, MalCon on what can be termed as the onset of next generation of hardware based malware that can target mobile devices irrespective of Platforms. Typically, one of the largest challenges for...

Code injection

The sccp-protocol component in Cisco IP Communicator CIPC 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager CUCM, which allows remote attackers to cause a denial of service via vectors that trigger 1 on hook and 2 off hook messages, as demonstrated b...

CVE-2006-6896

The vulnerability CVE-2006-6896 affects the Bluetooth stack in the Plantronics Headset, caused by improper implementation of Non-pairable mode. This allows remote attackers within range to perform unauthorized pairing operations. The provided documents do not specify any remediation, patch versio...

CVE-2006-6896

The Bluetooth stack in the Plantronic Headset does not properly implement Non-pairable mode, which allows remote attackers to conduct unauthorized pair-up operations...

CVE-2006-6896

The Bluetooth stack in the Plantronic Headset does not properly implement Non-pairable mode, which allows remote attackers to conduct unauthorized pair-up operations...

CVE-2006-1367

The CVE-2006-1367 entry describes a vulnerability in Motorola P2K-based phones (notably PEBL U6, V600, E398) where the Headset Audio Gateway pairing is not required. The flaw allows a user-assisted attacker to connect over Bluetooth channel 3 and obtain AT-level access, enabling viewing of phoneb...

CVE-2005-4417

The default configuration of Widcomm Bluetooth for Windows BTW 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote...