seemoo-lab/internalblue

seemoo-lab/internalblue

GitHubGitHub
GitHubgithub.com
Releases2
Frequency9 months 2 weeks
Last Release
Stars771
Bluetooth experimentation framework for Broadcom and Cypress chips.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-6616↗
6.5 MEDIUM3.3 LOW

Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020).