CVE-2023-2683 Connection update while closing connection may lead to denial-of-service

A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error...

PT-2023-17907 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-12L Description: The issue is related to improperly used crypto in the btm sec encrypt change function of btm sec.cc. This could lead to a paired device escalation of privilege with no additional...

PT-2023-20812 · Unknown · Efr32 Bluetooth Le Stack

Name of the Vulnerable Software and Affected Versions: EFR32 Bluetooth LE stack versions 5.1.0 through 5.1.1 Description: A memory leak in the EFR32 Bluetooth LE stack allows an attacker to send an invalid pairing message, causing future legitimate connection attempts to fail. The error is...

Silicon Labs EFR32 资源管理错误漏洞

Silicon Labs EFR32 is a family of SoC wireless components from Silicon Labs, Inc. A security vulnerability exists in the Silicon Labs EFR32 Bluetooth LE stack versions 5.1.0 through 5.1.1. An attacker could exploit the vulnerability by sending invalid pairing messages, which could cause legitimat...

Apple and Google Join Forces to Stop Unauthorized Location-Tracking Devices

Apple and Google have teamed up to work on a draft industry-wide specification that's designed to tackle safety risks and alert users when they are being tracked without their knowledge or permission using devices like AirTags. "The first-of-its-kind specification will allow Bluetooth...

Exploit for Incorrect Authorization in Linux Linux_Kernel

Linux Bluetooth: Unauthorized management command execution CV...

CVE-2022-48313

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48314

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48313

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48314

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...

Design/Logic Flaw

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...

Design/Logic Flaw

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48314

CVE-2022-48314 affects Huawei/HarmonyOS Bluetooth module: vulnerability in pairing where user confirmation can be bypassed, potentially exposing confidentiality. Base CVSS 6.5 (Adjacency vector, Low access complexity, No user interaction required). Connected documents indicate Huawei HarmonyOS se...

CVE-2022-48314

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48313

Technical details about CVE-2022-48313 are not publicly provided in the supplied documents. Monitor updates from vendors (e.g., HarmonyOS/Red Hat) and NVD for affected products, impact, and fixes.

CVE-2022-48313

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality...

PT-2023-15693 · Unknown · Bluetooth Module

Name of the Vulnerable Software and Affected Versions: Bluetooth module affected versions not specified Description: The issue concerns a problem with the Bluetooth module where it is possible to bypass user confirmation during the pairing process. This could potentially impact confidentiality...

CVE-2020-10134

A flaw was discovered in the Bluetooth protocol affecting the Bluetooth LE Secure Connections pairing and the BR/EDR Secure Simple Pairing. An attacker with physical access to the Bluetooth connection could perform a man-in-the-middle attack between two devices using the Numeric Comparison and...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a pairing bypass user validation vulnerability in the Bluetooth module...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a pairing bypass user validation vulnerability in the Bluetooth module...