Android Bluetooth Hacking

Big thank you to Brilliant for sponsoring this video! Try Brilliant for free (for 30 days) and to get a 20% discount, visit: https://Brilliant.org/DavidBombal

CVE-2023-45866 allows attackers to remotely control an Android phone (and other devices) without pairing.

Details: Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role …

accept access android attackers authorize bluetooth bluez connection control cve cve-2023-45866 device devices encrypted hid injection keyboard may messages phone reports role unauthenticated