Samsung Galaxy Buds – Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption (Vendor Response: Working as Intended)

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-02 18:12 UTC
  • Importiert: 2026-07-09 06:42 UTC
  • Quelle-ID: full_disc
  • uid_hash: 6bc7fd23db876810d436b39a836d684dd793a0fd53fee1efac341677bb6e4303

Inhalt

Posted by 490h3fqwomf via Fulldisclosure on Jul 02 Hello Full Disclosure,

The following publicly available research describes a Bluetooth attack against Samsung Galaxy Buds that leverages

connection arbitration behavior between HFP and A2DP profiles to preempt an active audio session.

Title:

Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption

Exploiting Seamless Earbud Connection Arbitration to Bypass Pairing Trust Boundaries

According to the published research, an attacker within...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

threat_intel - de https://seclists.org/rss/fulldisclosure.rss