jackbnimble

3 exploits Active since Nov 2019
CVE-2019-15948 WRITEUP HIGH WORKING POC
Texas Instruments CC256x/WL18xx - Buffer Overflow
Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via a malformed Bluetooth Low Energy advertising packet, to cause a denial of service or potentially execute arbitrary code. This affects CC256xC-BT-SP 1.2, CC256xB-BT-SP 1.8, and WL18xx-BT-SP 4.4.
CVSS 8.8
CVE-2020-15531 WRITEUP HIGH WORKING POC
Silicon Labs Bluetooth Low Energy SDK < 2.13.3.0 - Remote Code Execution via Packet Data Buffer Overflow
Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air remote code execution vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles.
CVSS 8.8
CVE-2020-15532 WRITEUP MEDIUM WORKING POC
Silicon Labs Bluetooth Low Energy SDK < 2.13.3.0 - Buffer Overflow via Packet Data
Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denial of service vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles.
CVSS 6.5