CVE-2020-12351

This PoC exploits a heap-based type confusion vulnerability in the Linux L2CAP implementation (CVE-2020-12351) by sending a malicious L2CAP packet over a BLE connection. The exploit targets the BlueZ stack and demonstrates the vulnerability by triggering the type confusion via a crafted packet.

This is a functional exploit for CVE-2020-12351, demonstrating a zero-click RCE vulnerability in the Linux Kernel's Bluetooth stack (BleedingTooth). It leverages heap spraying and KASLR bypass to achieve remote code execution on vulnerable systems.