CVE-2020-0449

In btmsecdisconnected of btmsec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9...

CVE-2020-0449

creationtimestamp| type| source ---|---|--- 2020-11-10 16:27:22+00:00| seen| https://t.me/cibsecurity/16070...

CVE-2020-0449

The CVE affects Android’s Bluetooth stack, specifically the btm_sec_disconnected path in btm_sec.cc. A use-after-free leads to memory corruption that could enable remote code execution in the Bluetooth server, requiring user interaction to exploit. Affected Android versions include 8.0–11 (Androi...