BLUETOOTH LOW ENERGY GATT FUZZING

Summary from the TLDR InfoSec newsletter

Research on the Bluetooth Low Energy Generic ATTribute Profile (GATT) layer revealed vulnerabilities in various Bluetooth Low Energy (BLE) stacks. Attack scenarios were defined and a fuzzer was built to test BLE security. Vulnerabilities like DoS in NimBLE stack and Espressif GATT server example were discovered and reported.