In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715
Affected:< 9.1.0.291(c185e3r4p1)Fixed in:9.1.0.291(c185e3r4p1)CVE-2020-0022derived from NVD
honor 8x firmwareNVD
Affected:< 10.0.0.183(c185e2r6p1)Fixed in:10.0.0.183(c185e2r6p1)CVE-2020-0022derived from NVD
honor view 20 firmwareNVD
Affected:< 10.0.0.195(c636e3r4p3)Fixed in:10.0.0.195(c636e3r4p3)CVE-2020-0022derived from NVD
mate 20 firmwareNVD
Affected:< 10.0.0.195(c00e74r3p8)Fixed in:10.0.0.195(c00e74r3p8)CVE-2020-0022derived from NVD
mate 20 pro firmwareNVD
Affected:< 10.0.0.196(c185e7r2p4)Fixed in:10.0.0.196(c185e7r2p4)CVE-2020-0022derived from NVD
mate 20 x firmwareNVD
Affected:< 10.0.0.195(c00e74r2p8)Fixed in:10.0.0.195(c00e74r2p8)CVE-2020-0022derived from NVD
mate 30 5g firmwareNVD
Affected:< 10.0.0.203(c00e202r7p2)Fixed in:10.0.0.203(c00e202r7p2)CVE-2020-0022derived from NVD
mate 30 firmwareNVD
Affected:< 10.0.0.203(c00e202r7p2)Fixed in:10.0.0.203(c00e202r7p2)CVE-2020-0022derived from NVD
mate 30 pro 5g firmwareNVD
Affected:< 10.0.0.203(c00e202r7p2)Fixed in:10.0.0.203(c00e202r7p2)CVE-2020-0022derived from NVD
mate 30 pro firmwareNVD
Affected:< 10.0.0.203(c00e202r7p2)Fixed in:10.0.0.203(c00e202r7p2)CVE-2020-0022derived from NVD
nova 3 firmwareNVD
Affected:< 9.1.0.338(c00e333r1p1t8)Fixed in:9.1.0.338(c00e333r1p1t8)CVE-2020-0022derived from NVD
nova lite 3 firmwareNVD
Affected:< 9.1.0.322(c635e8r2p2)Fixed in:9.1.0.322(c635e8r2p2)CVE-2020-0022derived from NVD
p20 firmwareNVD
Affected:< 10.0.0.162(c00e156r1p4)Fixed in:10.0.0.162(c00e156r1p4)CVE-2020-0022derived from NVD
p20 pro firmwareNVD
Affected:< 10.0.0.162(c00e156r1p4)Fixed in:10.0.0.162(c00e156r1p4)CVE-2020-0022derived from NVD
p30 firmwareNVD
Affected:< 10.0.0.190(c432e22r2p5)Fixed in:10.0.0.190(c432e22r2p5)CVE-2020-0022derived from NVD
p30 pro firmwareNVD
Affected:< 10.0.0.195(c00e85r2p8)Fixed in:10.0.0.195(c00e85r2p8)CVE-2020-0022derived from NVD
p smart 2019 firmwareNVD
Affected:< 10.0.0.180(c185e3r4p1)Fixed in:10.0.0.180(c185e3r4p1)CVE-2020-0022derived from NVD
p smart firmwareNVD
Affected:< 9.1.0.193(c605e6r1p5t8)Fixed in:9.1.0.193(c605e6r1p5t8)CVE-2020-0022derived from NVD
y6 2019 firmwareNVD
Affected:< 9.1.0.290(c185e5r4p1)Fixed in:9.1.0.290(c185e5r4p1)CVE-2020-0022derived from NVD
y6 pro 2019 firmwareNVD
Affected:< 9.1.0.290(c636e5r3p1)Fixed in:9.1.0.290(c636e5r3p1)CVE-2020-0022derived from NVD
y9 2019 firmwareNVD
Affected:< 9.1.0.264(c185e2r5p1t8)Fixed in:9.1.0.264(c185e2r5p1t8)CVE-2020-0022derived from NVD
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorAdjacent
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploit Intelligence
5.42%probability of exploitation in 30 days
92ndpercentile
High risk: more likely to be exploited than 92% of all known CVEs.
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.
