Unauthenticated keystroke injection from BT on Android, Linux, macOS/iOS*
Unauthenticated keystroke injection from BT on Android, Linux, macOS/iOS*
github.com
reblog/cve-2023-45866 at main · skysafe/reblog

Unpatched devices are vulnerable under the following conditions:
- Android devices are vulnerable whenever Bluetooth is enabled
- Linux/BlueZ requires that Bluetooth is discoverable/connectable
- iOS and macOS are vulnerable when Bluetooth is enabled and a Magic Keyboard has been paired with the phone or computer
Time to disable Bluetooth on all your old android phones!