CVE-2022-20021: Medium severity android vulnerability
In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMPhostconnectionreq. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198513; Issue ID: ALPS06198513.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-20021?
CVE-2022-20021 is a vulnerability in Bluetooth that could lead to a remote denial of service attack.
How does CVE-2022-20021 affect Android devices?
CVE-2022-20021 affects Android devices running version 10.0 and 11.0.
Is user interaction required to exploit CVE-2022-20021?
No, user interaction is not needed for exploitation of CVE-2022-20021.
What is the severity of CVE-2022-20021?
CVE-2022-20021 has a severity rating of 6.5, which is considered medium.
How can I fix CVE-2022-20021 on my Android device?
To fix CVE-2022-20021 on your Android device, you should apply the latest security patches provided by your device manufacturer.