Blue-Borne

Blue-Borne BlueBorne Exploits & Framework This repository contains a PoC code of various exploits for the BlueBorne vulnerabilities. Under 'android' exploits for the Android RCE vulnerability CVE-2017-0781, and the SDP Information leak vulnerability CVE-2017-0785 can be found. Under 'linux-bluez'...

BlueZ AVRCP Bypass

The vulnerability of the AVRCP protocol implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data beyond the buffer limits of memory. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions using a...

Audio Profile AVRCP Component BlueZ Unauthorized Access

The vulnerability of the Audio Profile AVRCP component in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data beyond the allowed range. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

BlueZ AVRCP Bypass

The vulnerability of the AVRCP protocol implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data beyond the buffer limits of memory. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions using a...

BlueZ OBEX DoS

The vulnerability of the OBEX protocol implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data outside of the allowed range. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...

ROS-20250128-07

A vulnerability in the HID Profile Human Interface Device interface of the Bluetooth protocol stack for the Linux BlueZ operating system is related to an access control flaw. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary commands...

Audio Profile AVRCP Component BlueZ Code Execution

The vulnerability of the Audio Profile AVRCP component in the Bluetooth protocol stack for the Linux BlueZ operating system is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Audio Profile AVRCP Component BlueZ Code Execution

The vulnerability of the Audio Profile AVRCP component in the Bluetooth protocol stack for the Linux BlueZ operating system is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

BlueZ Phone Book Access Code Execution

The vulnerability of the Phone Book Access component in the Bluetooth protocol stack for the Linux BlueZ operating system is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux BlueZ HID Profile Privilege Escalation

The vulnerability of the HID Profile interface of the Bluetooth protocol stack for the Linux BlueZ operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands remotely...

Bluetooth BlueZ sdp_cstate_alloc_buf Buffer Overflow DoS

The vulnerability of the sdpcstateallocbuf function in the Bluetooth technology stack for Linux BlueZ is related to the lack of memory release when processing a linked list of cstates. Exploiting this vulnerability allows an attacker to cause a service failure...

ROS-20220628-02

A vulnerability in the Bluetooth protocol stack for Linux BlueZ is related to insufficient validation of user input during A2DP profile processing. user input during A2DP profile processing. Exploitation of the vulnerability could allow an attacker, remotely, transmit specially crafted data to th...

BlueZ Bluetooth Authentication

The vulnerability of the Bluetooth protocol stack for the Linux BlueZ operating system is related to improper authentication. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android

Blue-Borne BlueBorne Exploits & Framework This repository...

Linux BlueZ SDP Server Information Disclosure Vulnerability

BlueZ is an official Bluetooth stack for Linux, SDP server is one of the SDP servers. An information disclosure vulnerability exists in the Linux BlueZ SDP server. An information disclosure vulnerability exists in the SDP search attribute request processing of the SDP server in BlueZ 5.46 and...