Samsung Galaxy Buds – Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption (Vendor Response: Working as Intended)

Posted by 490h3fqwomf via Fulldisclosure on Jul 02

Hello Full Disclosure,



The following publicly available research describes a Bluetooth attack against Samsung Galaxy Buds that leverages

connection arbitration behavior between HFP and A2DP profiles to preempt an active audio session.



Title:



Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption

Exploiting Seamless Earbud Connection Arbitration to Bypass Pairing Trust Boundaries



According to the published research, an attacker within...