Winsage
June 26, 2024
BLE is used to send large amounts of data in short periods using BLE protocols. Advertising is used by BLE-compatible devices to broadcast data, including device name, manufacturer ID, type, and capabilities. A vulnerability in the Windows Bluetooth Stack allows for an out-of-bounds write when an 8-bit unsigned integer with more than 255 sections in the data is triggered. This vulnerability was fixed in March 2023, and users of affected Windows products are recommended to upgrade to prevent exploitation.