CVE-2020-0022

Published: Feb 13, 2020Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715

Affected (25)

Products: Google: Android · Huawei: Mate 20 Firmware, Mate 20 Pro Firmware, Mate 20 X Firmware, P Smart Firmware, P Smart 2019 Firmware, P20 Firmware, P20 Pro Firmware, P30 Firmware, P30 Pro Firmware, Y6 2019 Firmware, Y6 Pro 2019 Firmware, Y9 2019 Firmware, Nova 3 Firmware, Nova Lite 3 Firmware, Honor 8a Firmware, Honor 8x Firmware, Honor View 20 Firmware, Mate 30 Pro Firmware, Mate 30 Firmware, Mate 30 Pro 5g Firmware, Mate 30 5g Firmware

Google

1 product

Android

Huawei

21 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Google Android	Version 10.0
Google Android	Version 8.0
Google Android	Version 8.1
Google Android	Version 9.0

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 20 Firmware	Before 10.0.0.195\(c00e74r3p8\)

Running on/with	Platform Versions
Huawei Mate 20	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 20 Pro Firmware	Before 10.0.0.196\(c185e7r2p4\)

Running on/with	Platform Versions
Huawei Mate 20 Pro	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 20 X Firmware	Before 10.0.0.195\(c00e74r2p8\)

Running on/with	Platform Versions
Huawei Mate 20 X	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P Smart Firmware	Before 9.1.0.193\(c605e6r1p5t8\)

Running on/with	Platform Versions
Huawei P Smart	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P Smart 2019 Firmware	Before 10.0.0.180\(c185e3r4p1\)

Running on/with	Platform Versions
Huawei P Smart 2019	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P20 Firmware	Before 10.0.0.162\(c00e156r1p4\)

Running on/with	Platform Versions
Huawei P20	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P20 Pro Firmware	Before 10.0.0.162\(c00e156r1p4\)

Running on/with	Platform Versions
Huawei P20 Pro	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.0.0.190\(c432e22r2p5\)

Running on/with	Platform Versions
Huawei P30	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P30 Pro Firmware	Before 10.0.0.195\(c00e85r2p8\)

Running on/with	Platform Versions
Huawei P30 Pro	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y6 2019 Firmware	Before 9.1.0.290\(c185e5r4p1\)

Running on/with	Platform Versions
Huawei Y6 2019	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y6 Pro 2019 Firmware	Before 9.1.0.290\(c636e5r3p1\)

Running on/with	Platform Versions
Huawei Y6 Pro 2019	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y9 2019 Firmware	Before 9.1.0.264\(c185e2r5p1t8\)

Running on/with	Platform Versions
Huawei Y9 2019	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nova 3 Firmware	Before 9.1.0.338\(c00e333r1p1t8\)

Running on/with	Platform Versions
Huawei Nova 3	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nova Lite 3 Firmware	Before 9.1.0.322\(c635e8r2p2\)

Running on/with	Platform Versions
Huawei Nova Lite 3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor 8a Firmware	Before 9.1.0.291\(c185e3r4p1\)

Running on/with	Platform Versions
Huawei Honor 8a	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor 8x Firmware	Before 10.0.0.183\(c185e2r6p1\)

Running on/with	Platform Versions
Huawei Honor 8x	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor View 20 Firmware	Before 10.0.0.195\(c636e3r4p3\)

Running on/with	Platform Versions
Huawei Honor View 20	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 30 Pro Firmware	Before 10.0.0.203\(c00e202r7p2\)

Running on/with	Platform Versions
Huawei Mate 30 Pro	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 30 Firmware	Before 10.0.0.203\(c00e202r7p2\)

Running on/with	Platform Versions
Huawei Mate 30	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 30 Pro 5g Firmware	Before 10.0.0.203\(c00e202r7p2\)

Running on/with	Platform Versions
Huawei Mate 30 Pro 5g	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 30 5g Firmware	Before 10.0.0.203\(c00e202r7p2\)

Running on/with	Platform Versions
Huawei Mate 30 5g	All versions

Related CWEs

CWE-682

Incorrect Calculation

The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

References (8)

http://packetstormsecurity.com/files/156891/Android-Bluetooth-Remote-Denial-Of-Service.html

Source: security@android.com

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2020/Feb/10

Source: security@android.com

Mailing ListThird Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-03-smartphone-en

Source: security@android.com

Third Party Advisory

https://source.android.com/security/bulletin/2020-02-01

Source: security@android.com

PatchVendor Advisory

http://packetstormsecurity.com/files/156891/Android-Bluetooth-Remote-Denial-Of-Service.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2020/Feb/10

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-03-smartphone-en

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://source.android.com/security/bulletin/2020-02-01

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.