VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jan 22, 2020· Updated Jun 17, 2026

CVE-2018-16264

CVE-2018-16264

Description

The BlueZ system service in Tizen allows an unprivileged process to partially control Bluetooth or acquire sensitive information, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

Affected products

19
  • Tizen/Tizendescription
  • Tizen/BlueZllm-create
    Range: <5.0 M1
  • Samsung Mobile/Galaxy Gearllm-fuzzy
    Range: <RE2
  • Linux/Tizen16 versions
    cpe:2.3:o:linux:tizen:1.0:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:o:linux:tizen:1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:1.0:m1:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.3:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.3.1:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:2.4:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:3.0:m2:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:3.0:m3:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:4.0:m1:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:4.0:m2:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:4.0:m3:*:*:*:*:*:*
    • cpe:2.3:o:linux:tizen:5.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.