Bluetooth implementations may not sufficiently validate elliptic curve parameters

ronjor · Jul 23, 2018

Original Release date: 23 Jul 2018 | Last revised: 23 Jul 2018

Overview
Bluetooth firmware or operating system software drivers may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.
Solution
Apply an update
Both software and firmware updates are expected over the coming weeks. Affected users should check with their device vendor for availability of updates. Further information for vendors is provided in the Vendor Status section below.
Click to expand...

__Nikopol · Jul 23, 2018

Are there ever firmware updates for phones?

Log in or Sign up

Bluetooth implementations may not sufficiently validate elliptic curve parameters

ronjor Global Moderator

__Nikopol Registered Member

Log in or Sign up

Bluetooth implementations may not sufficiently validate elliptic curve parameters

ronjor Global Moderator

__Nikopol Registered Member

Useful Searches