202 matches found
CVE-2020-10135-BIAS
CVE-2020-10135-BIAS CVE 2020-10135 a.k.a BIAS Bluetooth Impersonation Attack Seems like after a while and jumping through some hoops was able to perform BIAS Bluetooth Impersonation Attack CVE 2020-10135. Impersonated Samsung S3 Neo+ connection to Linux host. Cool stuff. THANK YOU for Internalblu...
JXL_Infotainment_CVE-2025-63895
JXLInfotainmentCVE-2025-63895 CVE-2025-63895 Attack Name 📂 Additional Details Afftected product Affected Components Bluetooth Classic version 5.0 Bluetooth firmware stack LMP implementation Infotainment Bluetooth service Attack Vector An attacker within Bluetooth range can exploit this issue by...
CVE-2021-28136
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets during the pairing process, allowing attackers in radio range to trigger memory corruption and consequently a crash in ESP32 via a replaye...
CVE-2021-28155
The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown a device by flooding the target device with LMP Feature Response data...
CVE-2021-28139
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield...
CVE-2021-31613
The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle the reception of a truncated LMP packet during the LMP auto rate procedure, allowing attackers in radio range to immediately crash and restart a device via a crafted LMP packet...
CVE-2021-31611
The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle an out-of-order LMP Setup procedure that is followed by a malformed LMP packet, allowing attackers in radio range to deadlock a device via a crafted LMP packet. The user needs to manually reboo...
CVE-2021-31612
The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing attackers in radio range to trigger a deadlock via a crafted LMP packet...
CVE-2025-63895: Improper Resource Shutdown or Release
An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to cause a Denial of Service DoS via sending a crafted Link Manager Protocol LMP packet...
EUVD-2021-14835
Malware in sbrugna...
EUVD-2019-5349
Malware in sbrugna...
EUVD-2021-20809
Malware in sbrugna...
EUVD-2021-14834
Malware in sbrugna...
EUVD-2021-14853
Malware in sbrugna...
EUVD-2018-11534
Malware in sbrugna...
EUVD-2021-20812
Malware in sbrugna...
EUVD-2021-18668
Malware in sbrugna...
EUVD-2021-20810
Malware in sbrugna...