CVE-2020-0022: Google Android

High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days.

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715

Affected products

  • Google Android: version 8.0 only; version 8.1 only; version 9.0 only; version 10.0 only
  • Huawei Honor 8a Firmware: before 9.1.0.291\(c185e3r4p1\) (fixed in 9.1.0.291\(c185e3r4p1\))
  • Huawei Honor 8x Firmware: before 10.0.0.183\(c185e2r6p1\) (fixed in 10.0.0.183\(c185e2r6p1\))
  • Huawei Honor View 20 Firmware: before 10.0.0.195\(c636e3r4p3\) (fixed in 10.0.0.195\(c636e3r4p3\))
  • Huawei Mate 20 Firmware: before 10.0.0.195\(c00e74r3p8\) (fixed in 10.0.0.195\(c00e74r3p8\))
  • Huawei Mate 20 Pro Firmware: before 10.0.0.196\(c185e7r2p4\) (fixed in 10.0.0.196\(c185e7r2p4\))
  • Huawei Mate 20 X Firmware: before 10.0.0.195\(c00e74r2p8\) (fixed in 10.0.0.195\(c00e74r2p8\))
  • Huawei Mate 30 5g Firmware: before 10.0.0.203\(c00e202r7p2\) (fixed in 10.0.0.203\(c00e202r7p2\))
  • Huawei Mate 30 Firmware: before 10.0.0.203\(c00e202r7p2\) (fixed in 10.0.0.203\(c00e202r7p2\))
  • Huawei Mate 30 Pro 5g Firmware: before 10.0.0.203\(c00e202r7p2\) (fixed in 10.0.0.203\(c00e202r7p2\))
  • Huawei Mate 30 Pro Firmware: before 10.0.0.203\(c00e202r7p2\) (fixed in 10.0.0.203\(c00e202r7p2\))
  • Huawei Nova 3 Firmware: before 9.1.0.338\(c00e333r1p1t8\) (fixed in 9.1.0.338\(c00e333r1p1t8\))
  • Huawei Nova Lite 3 Firmware: before 9.1.0.322\(c635e8r2p2\) (fixed in 9.1.0.322\(c635e8r2p2\))
  • Huawei p20 Firmware: before 10.0.0.162\(c00e156r1p4\) (fixed in 10.0.0.162\(c00e156r1p4\))
  • Huawei p20 Pro Firmware: before 10.0.0.162\(c00e156r1p4\) (fixed in 10.0.0.162\(c00e156r1p4\))
  • Huawei p30 Firmware: before 10.0.0.190\(c432e22r2p5\) (fixed in 10.0.0.190\(c432e22r2p5\))
  • Huawei p30 Pro Firmware: before 10.0.0.195\(c00e85r2p8\) (fixed in 10.0.0.195\(c00e85r2p8\))
  • Huawei P Smart 2019 Firmware: before 10.0.0.180\(c185e3r4p1\) (fixed in 10.0.0.180\(c185e3r4p1\))
  • Huawei P Smart Firmware: before 9.1.0.193\(c605e6r1p5t8\) (fixed in 9.1.0.193\(c605e6r1p5t8\))
  • Huawei y6 2019 Firmware: before 9.1.0.290\(c185e5r4p1\) (fixed in 9.1.0.290\(c185e5r4p1\))
  • Huawei y6 Pro 2019 Firmware: before 9.1.0.290\(c636e5r3p1\) (fixed in 9.1.0.290\(c636e5r3p1\))
  • Huawei y9 2019 Firmware: before 9.1.0.264\(c185e2r5p1t8\) (fixed in 9.1.0.264\(c185e2r5p1t8\))

Published 2020-02-13. Last modified 2026-06-17.