CVEvulnerability

CVE-2020-0022

8.8 HIGH Published 2020-02-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-02-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-682

Description

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715

Affected configurations

• google android 8.0 • google android 8.1 • google android 9.0 • google android 10.0 • huawei mate 20 firmware (< 10.0.0.195\(c00e74r3p8\)) • huawei mate 20 pro firmware (< 10.0.0.196\(c185e7r2p4\)) • huawei mate 20 x firmware (< 10.0.0.195\(c00e74r2p8\)) • huawei p smart firmware (< 9.1.0.193\(c605e6r1p5t8\)) • huawei p smart 2019 firmware (< 10.0.0.180\(c185e3r4p1\)) • huawei p20 firmware (< 10.0.0.162\(c00e156r1p4\)) • huawei p20 pro firmware (< 10.0.0.162\(c00e156r1p4\)) • huawei p30 firmware (< 10.0.0.190\(c432e22r2p5\)) • huawei p30 pro firmware (< 10.0.0.195\(c00e85r2p8\)) • huawei y6 2019 firmware (< 9.1.0.290\(c185e5r4p1\)) • huawei y6 pro 2019 firmware (< 9.1.0.290\(c636e5r3p1\)) • huawei y9 2019 firmware (< 9.1.0.264\(c185e2r5p1t8\)) • huawei nova 3 firmware (< 9.1.0.338\(c00e333r1p1t8\)) • huawei nova lite 3 firmware (< 9.1.0.322\(c635e8r2p2\)) • huawei honor 8a firmware (< 9.1.0.291\(c185e3r4p1\)) • huawei honor 8x firmware (< 10.0.0.183\(c185e2r6p1\)) • huawei honor view 20 firmware (< 10.0.0.195\(c636e3r4p3\)) • huawei mate 30 pro firmware (< 10.0.0.203\(c00e202r7p2\)) • huawei mate 30 firmware (< 10.0.0.203\(c00e202r7p2\)) • huawei mate 30 pro 5g firmware (< 10.0.0.203\(c00e202r7p2\)) • huawei mate 30 5g firmware (< 10.0.0.203\(c00e202r7p2\))

Related

Weakness · CWE (1)

  • CWE-682 Incorrect Calculation weakness

Referenced by CWE · observed example (2)

  • CWE-682 Incorrect Calculation weakness
  • CWE-787 Out-of-bounds Write weakness

References