CVE-2018-16270 | BDVDB-2026-129521 Detail

Description#

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf
https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be

Exploit#

No public exploit known

History#

Version 12020-01-22Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.