Vulnerability · Published Feb 13, 2020 · Assigned by google_android

CVE-2020-0022

High 8.8

In plain English

A high-severity security flaw in Android. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 6.1% (higher than 93% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)6.1%top 6.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Public PoC

Official description

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715

Affected products (as reported)

Vendor	Product	Versions
n/a	Android	Android-8.0 Android-8.1 Android-9 Android-10

Weakness: CWE-682 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://source.android.com/security/bulletin/2020-02-01 x_refsource_MISC
20200214 Re: [FD] Critical Bluetooth Vulnerability in Android (CVE-2020-0022) - BlueFrag mailing-list, x_refsource_FULLDISC
http://packetstormsecurity.com/files/156891/Android-Bluetooth-Remote-Denial-Of-Service.html x_refsource_MISC
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-03-smartphone-en x_refsource_CONFIRM