CVE-2020-0022

Published Feb 13, 2020 CVSS 3.1 · 8.8 High EPSS 6.1% KEV · Not listed
Description
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
CPEs cpe:2.3:o:google:android:10.0:-:*:*:*:*:*:*
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
google_android
Published
Updated
Aug 4, 2024, 5:47 AM
Reserved
Oct 17, 2019, 12:00 AM
Status
Modified
Published
Feb 13, 2020, 3:15 PM
Modified
Jun 17, 2026, 2:45 AM