CVE-2020-0022

Vendorgoogle, huaweiProductandroid, mate 20 firmware, nova 3 firmware, p20 firmware, y9 2019 firmware, p30 firmware, p30 pro firmware, mate 20 x firmware, p20 pro firmware, honor 8a firmware, mate 20 pro firmware, p smart firmware, honor 8x firmware, honor view 20 firmware, mate 30 5g firmware, mate 30 firmware, mate 30 pro 5g firmware, mate 30 pro firmware, nova lite 3 firmware, p smart 2019 firmware, y6 2019 firmware, y6 pro 2019 firmwareDiscoveredFeb 13, 2020UpdatedNov 21, 2024

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715

View graph Watch Export

CVSS v3.1

8.8 HIGH

EPSS

6.05%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorADJACENT

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Timeline

disclosure → media coverage

Feb 13, 2020

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024

Public PoC (9)

github.com/leommxj/cve-2020-0022 github.com/idkwim/CVE-2020-0022 github.com/k3vinlusec/Bluefrag_CVE-2020-0022 github.com/Polo35/CVE-2020-0022 github.com/5k1l/cve-2020-0022 github.com/lsw29475/CVE-2020-0022 github.com/devdanqtuan/poc-for-cve-2020-0022 github.com/themmokhtar/CVE-2020-0022 github.com/kalibb/CVE-2020-0022

Unverified third-party code — review before executing.