BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution
Introduction I noticed that the network subsystem was already being fuzzed extensively by syzkaller, but that subsystems like Bluetooth were less well covered. In general, research on the Bluetooth host attack surface seemed to be quite limited – with most public vulnerabilities in Bluetooth only affecting the firmware or the specification itself, and only allowing attackers to eavesdrop and/or manipulate information. But what if attackers could take full control over devices? The most promin...
Francis Perron Eduardo Vela Jann Horn Linux Bluetooth Zero Click Remote Code Linux Bluetooth Linux Bluetooth Subsystem
Source: google.github.io