EUVD-2026-75221
GHSA-cc37-h9x3-vxxm
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent BLE vector, no auth or user interaction needed; scope change reflects potential pivot to paired Apple iOS device.
Primary rating from Vendor (vuldb).
CVSS VectorVendor: vuldb
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. The attack must be carried out from within the local network. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Buffer overflow in the Apple Notification Center Service (ANCS) event handler of the Pavlok Behavioral Conditioning Wearable allows unauthenticated adjacent-network attackers to achieve full compromise of the wearable device and potentially the paired Apple host. The vulnerability resides in firmware versions up to build 20260707 and is exploitable by any attacker within Bluetooth Low Energy range without credentials. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The target must be within Bluetooth Low Energy radio range (typically 10-100 meters depending on environment and antenna). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 8.6 (AV:A/AC:L/AT:N/PR:N/UI:N with full VC/VI/VA and SC/SI/SA:H) accurately captures the high potential impact but is tempered by the adjacent attack vector - exploitation is bounded by BLE range (typically 10-100 meters). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch has been identified at time of analysis; the vendor did not respond to coordinated disclosure. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Pavlok wearables in use and disable Bluetooth connectivity on devices not in active use; configure any remaining devices to pair with trusted Apple hosts only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-119 – Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today