Integer overflow

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2020-11169

CVE-2020-11169 describes a buffer over-read while processing received L2CAP packets due to a missing integer overflow check, affecting multiple Qualcomm/Snapdragon platforms (APQ8009, APQ8053, QCA6390, QCN7605/7606, SA41x/SA51x/SA61x/SA8155P, SC8180X, SDX55) across Snapdragon Auto/Compute/Connect...

CVE-2020-11156

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

PT-2020-12576

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description A buffer over-read issue exists in the Bluetooth estack due to the lack of a check for the invalid length of an L2cap packet received from a peer device. This issue affec...

CVE-2020-11156: Improper Input Validation

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

CVE-2020-11169: Out-of-bounds Read

u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

Exploit for Incorrect Calculation in Google Android

...

BlueZ Out-of-Bounds Read Vulnerability

BlueZ is an official Bluetooth stack for Linux. A security vulnerability exists in the 'l2cappacket' function in the monitor/packet.c source file of BlueZ version 5.42. An attacker can exploit this vulnerability by running a compromised file to cause btmon to crash read across boundaries...

CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

PT-2016-7830

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer over-read issue was identified in the l2cap packet function in the monitor/packet.c source file. This issue can be triggered by processing a corrupted dump file, resulting in a btmon crash. Recommendatio...

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

CVE-2006-0671

Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...

CVE-2006-0670

CVE-2006-0670 is a buffer overflow in bluez-hcidump’s l2cap.c (hcidump 1.29) allowing a remote attacker to crash the system via a malformed L2CAP packet over Bluetooth. Debian/Ubuntu advisories document remote DoS with bluez-hcidump and show fixed/upgraded packages (e.g., bluez-hcidump 1.17-1sarg...

[ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones

Software affected Bluetooth Stack on Sony/Ericsson cell phones Version Sony/Ericsson K600i, V600i, W800i, T68i and certainly other models Impact Bluetooth Stack Denial of Service may be more - may be a rootkit : - Phone DoS reboot or shutdown - White screen bug freeze sleeping Credits Pierre...