CVE-2021-28139

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield...

CVE-2021-28135

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service crash in ESP32 by flooding the target device with LMP Feature Response data...

CVE-2021-28155: Undefined Security Weakness

The Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown a device by flooding the target device with LMP Feature Response data...

CVE-2021-28135: Undefined Security Weakness

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service crash in ESP32 by flooding the target device with LMP Feature Response data...

PT-2021-4307

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 4.4 and earlier Description The issue arises from insufficient input validation in the Bluetooth Classic implementation, allowing a remote attacker to cause a denial of service by flooding the target device with LMP...

PT-2021-4309

Name of the Vulnerable Software and Affected Versions JBL TUNE500BT devices affected versions not specified ESP32 series modules affected versions not specified Description The issue is related to the Bluetooth Classic implementation, which does not properly handle certain data. This can allow an...

CVE-2021-28139: Undefined Security Weakness

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield...

PT-2021-4297

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 4.4 and earlier Description The Bluetooth Classic implementation does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger...