VULNERABILITY INTELLIGENCE

CVE-2020-0022

CVSS score8.8 HIGH

EPSS probability6.05%

CISA KEVNot currently listed

Published2020-02-13

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715

Weakness classification

nvd@nist.gov: CWE-682
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-682

Primary references

security@android.com — Exploit, Third Party Advisory, VDB Entry
security@android.com — Mailing List, Third Party Advisory
security@android.com — Third Party Advisory
security@android.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory