Security News > 2021 > September > Bluetooth BrakTooth bugs could affect billions of devices

Bluetooth BrakTooth bugs could affect billions of devices
2021-09-02 23:22

Vulnerabilities collectively referred to as BrakTooth are affecting Bluetooth stacks implemented on system-on-a-chip circuits from over a dozen vendors.

Researchers from the Singapore University of Technology and Design have published details about BrakTooth - a new family of security vulnerabilities in commercial Bluetooth stacks.

They assessed 13 Bluetooth devices from close to a dozen SoC vendors counting Intel, Qualcomm, Texas Instruments, and Cypress.

Considering the variety of products affected, saying that BrakTooth affects billions of devices is likely an accurate estimation.

The researchers say that the risk associated with the BrakTooth set of security flaws ranges from denial-of-service by crashing the device firmware, or a deadlock condition where Bluetooth communication is no longer possible, to arbitrary code.

Devices running on the AX200 SoC from Intel and Qualcomm's WCN3990 SoC are vulnerable to a DoS condition triggered when sending a malformed packet.


News URL

https://www.bleepingcomputer.com/news/security/bluetooth-braktooth-bugs-could-affect-billions-of-devices/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Bluetooth 4 3 10 3 0 16