CVE-2018-16264

The CVE-2018-16264 issue involves the BlueZ system service in Tizen. Affected: Tizen before 5.0 M1 and Tizen-based firmwares (Samsung Galaxy Gear) before RE2. Root cause: improper D-Bus security policy configurations. Impact: an unprivileged process could partially control Bluetooth or access sen...

CVE-2018-16265

The CVE concerns the bt/bt_core system service in Tizen, where an unprivileged process can create a system user interface and control the Bluetooth pairing process due to improper D-Bus security policy configurations. Affected: Tizen before 5.0 M1 and Tizen-based firmwares (e.g., Samsung Galaxy G...