CVE-2020-0117
published 2020-06-10CVE-2020-0117: In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth…
PriorityP355critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.58%
72.8th percentile
In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2020-0117: Android Security Bulletin 2020-06-01
CVE: CVE-2020-0117
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 8
vendor_android·2020-06-01·CVSS 9.8
CVE-2020-0117 [CRITICAL] CVE-2020-0117: Android Security Bulletin 2020-06-01
CVE: CVE-2020-0117
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 8
Android Security Bulletin 2020-06-01
CVE: CVE-2020-0117
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 8.0, 8.1, 9, 10
References: A-151155194
GHSA
GHSA-pr8q-hph7-m25m: In aes_cmac of aes_cmac
ghsa_unreviewed·2022-05-24
CVE-2020-0117 [HIGH] CWE-190 GHSA-pr8q-hph7-m25m: In aes_cmac of aes_cmac
In aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-151155194
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-06-10
Published