CVE-2020-26555
- Source
- https://cve.org/CVERecord?id=CVE-2020-26555
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-26555.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-26555
- Aliases
-
- A-174626251
- ASB-A-174626251
- Downstream
- Related
- Published
- 2021-05-24T18:15:07.837Z
- Modified
- 2026-02-10T16:42:18.526825Z
- Severity
-
- 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.
- References
-
- https://kb.cert.org/vuls/id/799380
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/
- https://www.kb.cert.org/vuls/id/799380
- https://kb.cert.org/vuls/id/799380
- https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html
Affected packages
Git / github.com/python-pillow/pillow
Affected ranges
- Type
- GIT
- Repo
- https://github.com/python-pillow/pillow
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected