2020 · Conference accepted
Frankenstein: Advanced Wireless Fuzzing to Exploit New Bluetooth Escalation Targets
Frankenstein emulates Bluetooth firmware dumps and fuzzes a virtual modem. It evaluates Broadcom and Cypress stacks, finding three zero-click vulnerabilities, host escalation issues, and BlueFrag on Android.
Scope and limitations
The evaluation covers Broadcom and Cypress Bluetooth stacks, Wi-Fi/Bluetooth coexistence, a Bluetooth 5.2 link-key flaw, and Android devices.
Why it fits this collection
It uses emulation of closed-source firmware dumps to examine Bluetooth behavior and find vulnerabilities.
Publication and review details
- Venue
- USENIX Security 2020
- Status
- Conference accepted
- Publication / posting date
- June 17, 2020
- Date source
- First arXiv submission date; the arXiv comment names the venue.
- First arXiv submission
- June 17, 2020
- arXiv
- 2006.09809
- Reviewed arXiv version
- v1
The arXiv comment reads: To be published at USENIX Security
Sources reviewed
Reviewed against the paper and its primary sources. Cite the original authors using the linked paper or BibTeX.