CVE-2018-16270

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-01-22 · updated 2026-06-17
Weakness: CWE-269

Description

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.

Affected products

Samsung Galaxy Gear Firmware: before re2 — fixed in re2
Samsung Gear 2 Firmware: before re2 — fixed in re2
Samsung Gear Fit 2 Firmware: before re2 — fixed in re2
Samsung Gear Fit 2 Pro Firmware: before re2 — fixed in re2
Samsung Gear Fit Firmware: before re2 — fixed in re2
Samsung Gear Live Firmware: before re2 — fixed in re2
Samsung Gear S2 Firmware: before re2 — fixed in re2
Samsung Gear S3 Firmware: before re2 — fixed in re2
Samsung Gear S Firmware: before re2 — fixed in re2
Samsung Gear Sport Firmware: before re2 — fixed in re2

How to fix

Upgrade to a fixed version: Samsung Galaxy Gear Firmware re2; Samsung Gear 2 Firmware re2; Samsung Gear Fit 2 Firmware re2; Samsung Gear Fit 2 Pro Firmware re2; Samsung Gear Fit Firmware re2; Samsung Gear Live Firmware re2; Samsung Gear S2 Firmware re2; Samsung Gear S3 Firmware re2; Samsung Gear S Firmware re2; Samsung Gear Sport Firmware re2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-16270 or the next vulnerability affects your stack