High severity7.5NVD Advisory· Published Jan 22, 2020· Updated Jun 17, 2026

CVE-2018-16270

Description

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.

Affected products

Samsung/Galaxy Gear seriesdescription
Samsung Pay/Samsung Payllm-fuzzy
Range: <RE2
Samsung Mobile/Galaxy Gear Firmware
cpe:2.3:o:samsung:galaxy_gear_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear 2 Firmware
cpe:2.3:o:samsung:gear_2_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear Live Firmware
cpe:2.3:o:samsung:gear_live_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear S Firmware
cpe:2.3:o:samsung:gear_s_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear S2 Firmware
cpe:2.3:o:samsung:gear_s2_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear S3 Firmware
cpe:2.3:o:samsung:gear_s3_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear Sport Firmware
cpe:2.3:o:samsung:gear_sport_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear Fit Firmware
cpe:2.3:o:samsung:gear_fit_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear Fit 2 Firmware
cpe:2.3:o:samsung:gear_fit_2_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear Fit 2 Pro Firmware
cpe:2.3:o:samsung:gear_fit_2_pro_firmware:*:*:*:*:*:*:*:*
Range: <re2

Patches

Vulnerability mechanics

References

media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdfnvdExploitThird Party Advisory
www.youtube.com/watchnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000