-
Notifications
You must be signed in to change notification settings - Fork 211
Pull requests: google/nearby
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Fix race condition and UAF in Windows BLE GATT server ReadRequested handler
#4534
opened Sep 5, 2026 by
copybara-service
Bot
•
Draft
Fix ignored ble_result when l2cap is disabled
#4531
opened Sep 2, 2026 by
copybara-service
Bot
•
Draft
Complete the pending characteristic write when the BLE peer disconnects remotely
#4524
opened Aug 28, 2026 by
JeanmartinPV
Loading…
Trial Swift 6 language mode on //third_party/nearby/...
#4517
opened Aug 26, 2026 by
copybara-service
Bot
•
Draft
Read NetBiosName name as "device name" to compare with the "device name" from WIFI P2P frame
#4482
opened Jul 28, 2026 by
copybara-service
Bot
•
Draft
Prevent cross-medium endpoint injection attacks
#4472
opened Jul 20, 2026 by
copybara-service
Bot
•
Draft
Windows Quick Share used a weak, time-seeded PRNG to generate the WPA2-PSK and SSID for WIFI_HOTSPOT bandwidth upgrades (BWU). Because the SSID was broadcast in the clear and derived from the same PRNG, an attacker could use it as an oracle to recover the seed and the WPA2-PSK. Furthermore, UKEY2 application-layer encryption was explicitly disabled for Point-to-Point transfers on these upgraded channels, leaving file transfers vulnerable to interception and decryption by an RF-proximate attacker.
#4463
opened Jul 14, 2026 by
copybara-service
Bot
•
Draft
During a Nearby Connections bandwidth upgrade, the initiator relied on plaintext fields from an unauthenticated
CLIENT_INTRODUCTION message to determine whether to disable encryption. A network-adjacent attacker could exploit this to bypass UKEY2 authentication, downgrade the session to plaintext, and inject malicious payload chunks. Alternatively, an attacker could trigger a race condition with concurrent connection attempts to permanently deadlock the bandwidth upgrade thread.
#4462
opened Jul 14, 2026 by
copybara-service
Bot
•
Draft
Prevent pre-authentication SSRF and internal port-scan oracle in Windows Quick Share mDNS discovery (
b/509566800).
#4458
opened Jul 13, 2026 by
copybara-service
Bot
•
Draft
A use-after-free vulnerability in the Windows Quick Share BLE GATT server allowed a pre-authentication attacker to leak heap memory. The issue occurred when an unauthenticated GATT Read Request raced against a background advertisement rotation or Wi-Fi deauthentication event that called
Stop(), freeing the underlying characteristic data while the read handler was blocked.
#4457
opened Jul 13, 2026 by
copybara-service
Bot
•
Draft
Improve logging for Nearby Connections bandwidth upgrades and WifiDirect credentials.
#4445
opened Jul 6, 2026 by
copybara-service
Bot
•
Draft
Fix unbounded payload streaming in Nearby Connections and Sharing
#4437
opened Jun 29, 2026 by
copybara-service
Bot
•
Draft
Fix mixed topology vulnerability in PcpManager
#4435
opened Jun 28, 2026 by
copybara-service
Bot
•
Draft
Fix build issues and enhance Swift NearbyConnections API.
#4433
opened Jun 26, 2026 by
copybara-service
Bot
•
Draft
Prevent cross-medium endpoint injection attacks
#4429
opened Jun 25, 2026 by
copybara-service
Bot
•
Draft
Harden Nearby Connections Bandwidth Upgrade process
#4386
opened Jun 3, 2026 by
copybara-service
Bot
•
Draft
Previous Next
ProTip!
What’s not been updated in a month: updated:<2026-08-06.