medium6.5
CVE-2021-31610
The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in r…
Impact
The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (either restart or deadlock the device) by flooding a device with LMP_AU_rand data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mi | Mi True Wireless Earbuds Basic 2 Firmware | All versions |
| Bluetrum | Ab5376t Firmware | All versions |
| Bluetrum | Bt8896a Firmware | All versions |
References
- NVD record
- CVE.org record
- http://www.bluetrum.com/product/ab5376t.html
- http://www.bluetrum.com/product/bt8896a.html
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://www.mi.com/global/mi-true-wireless-earbuds-basic-2/
- http://www.bluetrum.com/product/ab5376t.html
- http://www.bluetrum.com/product/bt8896a.html
- https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
- https://www.mi.com/global/mi-true-wireless-earbuds-basic-2/