CVE-2020-0449

In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free

published November 10, 2020

CVSS
—
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-162497143

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01343 · 71.1th percentile
Published
2020-11-10T12:52Z
EPSS history
Timeline
  • 10 NOV 12:52Z
    In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free
    cvelistv5