CVE-2020-0022: High severity Google Android vulnerability
In reassembleanddispatch of packetfragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-0022?
CVE-2020-0022 has a high severity because it can lead to remote code execution without additional execution privileges.
How do I fix CVE-2020-0022?
To fix CVE-2020-0022, update your Android device to the latest security patch provided by Google.
What vulnerabilities does CVE-2020-0022 exploit?
CVE-2020-0022 exploits an out of bounds write due to incorrect bounds calculation in the Bluetooth module.
Which Android versions are affected by CVE-2020-0022?
CVE-2020-0022 affects Android versions 8.0, 8.1, 9.0, and 10.0.
Is user interaction required to exploit CVE-2020-0022?
No, user interaction is not required for exploiting CVE-2020-0022.