CVE-2019-9506

CVE-2019-9506, known as the "KNOB" attack, is a Bluetooth BR/EDR vulnerability affecting various vendors including Apple, Google, and Red Hat. It allows an attacker to force a sufficiently low encryption key length during negotiation, enabling practical brute-force decryption and arbitrary ciphertext injection. With a CVSS score of 8.1 (High), this adjacent attack requires low complexity and can lead to high confidentiality and integrity impacts. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage.