Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Linux-Heap-Based-Type-Confusion-in-L2CAP — CVE-2020-12351 | Kitploit
Tools/GitHubGitHub/naren-jayram/linux-heap-based-type-confusion-in-l2cap
Embedded Systems SecurityBluetooth SecurityIoT SecurityExploitationWireless SecurityBinary Exploitation
GitHubnaren-jayram/linux-heap-based-type-confusion-in-l2cap

Linux-Heap-Based-Type-Confusion-in-L2CAP

CVE-2020-12351

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
215 years agoNot yet reviewed

Linux: Heap-Based Type Confusion in L2CAP (CVE-2020-12351)

Linux: Heap-Based Type Confusion in L2CAP PoC (CVE-2020-12351) on BLE implementation

Why did I modify the original PoC?

The original PoC is focused on sending a malicious l2cap packet via Bluetooth Classic. However, I had a requirement to test it against a peripheral that supports only Bluetooth Low Energy (BLE) communication and has adopted the entire BlueZ stack (both classic and LE)

L2CAP is a common protocol that resides in host stack to support both bluetooth classic and BLE implementations

Prerequisite

Linux Machine with BLE Adapter. If the machine doesn't come with an inbuilt adapter, you can a get an external one

Usage:

root@kitploit:~
1. Compile 
gcc -o CVE-2020-12351 CVE-2020-12351.c -lbluetooth 

2. Run
$./CVE-2020-12351 <BLE_Peripheral_MAC_Address>      //MAC Format: FF:FF:FF:FF:FF:FF

Packet capture:
hcidump -i <hci0> -w CVE-2020-12351.pcap

Acknowledgements

  • Andy Nguyen, Google Security Research Team
Download Tool