Bluetooth Information Leakage in Samsung Devices Featuring Qualcomm and Exynos Chips

CVE-2019-16401

Summary

Certain Samsung Galaxy devices, including the S8 Plus, S3, and Note 2, are susceptible to a vulnerability that allows malicious actors to exploit Bluetooth connections for injecting commands that leak sensitive data. This data includes critical information such as IMSI, IMEI, call status, internet service status, signal strength, and battery level, posing significant risks to user privacy and security.

References