Samsung Galaxy Buds – Zero-Cli... Note

Samsung Galaxy Buds – Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption (Vendor Response: Working as Intended)

Posted by 490h3fqwomf via Fulldisclosure on Jul 02Hello Full Disclosure, The following publicly available research describes a Bluetooth attack against Samsung Galaxy Buds that leverages connection arbitration behavior between HFP and A2DP profiles to preempt an active audio session. Title: Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption Exploiting Seamless Earbud Connection Arbitration to Bypass Pairing Trust Boundaries According to the published research, an attacker within...