BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability

CVE-2024-8805

Summary

The vulnerability within the BlueZ HID over GATT Profile arises from inadequate access control mechanisms, allowing unauthorized network-adjacent attackers to execute arbitrary code on affected installations without requiring authentication. This flaw stems from a lack of necessary authorization that should precede access to specific functionalities within the profile. An attacker could exploit this weakness to run code in the context of the current user, having significant implications for the security of systems running the affected versions of BlueZ. Further details can be found in the advisory linked from ZDI-24-1229.

References