VulnSocial

CVE-2020-0022PoC(google / android)

MEDIUMCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for google android systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715

google CVEsBack to dashboard
4.5/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-682

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • android
  • honor_8a
  • honor_8a_firmware
  • honor_8x

Threat summary

  • Public PoC and exploit tooling are both present
  • 5 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 2 signals
  • PoC mentioned or linked in 3 signals
  • General: 1 classified signal
  • Peaked 4d ago at 1 mentions (2026-06-06); latest day: 1
  • 5 total mentions across 5 days

Affected systems

Vendors
googlehuawei
Products
androidhonor_8ahonor_8a_firmwarehonor_8xhonor_8x_firmwarehonor_view_20honor_view_20_firmwaremate_20mate_20_firmwaremate_20_pro

5 versions affected across 43 products

Deep dive

Activity timeline5 mentions / 5d
00111Mentions · 2026-06-06: 1Mentions · 2026-06-08: 1Mentions · 2026-06-18: 1Mentions · 2026-08-06: 1Mentions · 2026-10-12: 1PoC Mentioned / Linked · 2026-06-06: 1PoC Mentioned / Linked · 2026-06-18: 1PoC Mentioned / Linked · 2026-08-06: 1Exploit Tool / Code · 2026-06-18: 1Exploit Tool / Code · 2026-08-06: 106-0606-0806-1808-0610-12
Signal classification2 categories
PoC
375.0%
General
125.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-061
PoC1
2026-06-081
General1
2026-06-181
PoC1
2026-08-061
PoC1
Full discourse5 posts
  • 0xor0ne@0xor0ne
    PoC

    BlueFrag (CVE-2020-0022), N-Day exploit development (@akshit_it4ch1) https://it4ch1-007.github.io/posts/Poc-CVE-2020-0022/ #infosec https://t.co/d5OkxAbXtU

    Post summary

    The post announces a Proof of Concept for CVE-2020-0022 and shows exploit development, but offers no evidence of active exploitation, patches, or detailed technical data.

    1210126749.6K
    94.3K followersView on X
  • 0xor0ne@0xor0ne
    PoC

    N-Day exploit development. Revisiting BlueFrag (CVE-2020-0022) (@akshit_it4ch1) https://it4ch1-007.github.io/posts/Poc-CVE-2020-0022/ #infosec https://t.co/xCkkKYQeKr

    Post summary

    The tweet shares a Proof of Concept for CVE‑2020‑0022 via a linked page and highlights n‑day exploit development for the BlueFrag vulnerability.

    0190111545.8K
    93.0K followersView on X
  • Akshit Singh@akshit_it4ch1
    PoC

    A Deep Dive into BlueFrag (CVE-2020-0022) I just published a deep-dive blog post on the notorious BlueFrag vulnerability If you are into mobile vulnerability research, low-level OS internals, or exploit development, check out the full breakdown here: https://it4ch1-007.github.io/posts/Poc-CVE-2020-0022/

    Post summary

    The post offers a deep dive into BlueFrag (CVE-2020-0022) and links to a PoC, but it does not detail exploitation, patches, or technical specifics.

    021099615.8K
    140 followersView on X
  • zero@dev_zeroday0619

    폐쇄형 OS 라고 안전하지 않다 -> CVE-2016-4655, CVE-2016-4656, CVE-2016-4657, CVE-2021-30860 개방형 OS 역시 안전하지 않다 -> CVE-2025-54957, CVE-2023-24033, CVE-2019-2215, CVE-2020-0022 p.s. 개인적으로 관심있게 봤던 CVE 위주긴 함. + 페가수스 스파이웨어를 잊지말자...

    413160124.4K
    783 followersView on X
  • CVETrends@CVEShield
    General

    Top 5 Trending CVEs: 1 - CVE-2026-9366 2 - CVE-2026-42945 3 - CVE-2026-46640 4 - CVE-2026-49261 5 - CVE-2020-0022 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard

    Post summary

    The post merely lists trending CVE identifiers without providing any specific details, proof‑of‑concept, or exploitation information.

    00010130
    1.7K followersView on X
CPE platform detail46 entries

46 of 46 entries

PartVendorProductVersionTarget SWTarget HW
OSgoogleandroid10.0--
OSgoogleandroid8.0--
OSgoogleandroid8.1--
OSgoogleandroid9.0--
HWhuaweihonor_8a---
OShuaweihonor_8a_firmware---
HWhuaweihonor_8x---
OShuaweihonor_8x_firmware---
HWhuaweihonor_view_20---
OShuaweihonor_view_20_firmware---
HWhuaweimate_20---
OShuaweimate_20_firmware---
HWhuaweimate_20_pro---
OShuaweimate_20_pro_firmware---
HWhuaweimate_20_x---
OShuaweimate_20_x_firmware---
HWhuaweimate_30---
HWhuaweimate_30_5g---
OShuaweimate_30_5g_firmware---
OShuaweimate_30_firmware---
HWhuaweimate_30_pro---
HWhuaweimate_30_pro_5g---
OShuaweimate_30_pro_5g_firmware---
OShuaweimate_30_pro_firmware---
HWhuaweinova_3---
OShuaweinova_3_firmware---
HWhuaweinova_lite_3---
OShuaweinova_lite_3_firmware---
HWhuaweip20---
OShuaweip20_firmware---
HWhuaweip20_pro---
OShuaweip20_pro_firmware---
HWhuaweip30---
OShuaweip30_firmware---
HWhuaweip30_pro---
OShuaweip30_pro_firmware---
HWhuaweip_smart---
HWhuaweip_smart_2019---
OShuaweip_smart_2019_firmware---
OShuaweip_smart_firmware---
HWhuaweiy6_2019---
OShuaweiy6_2019_firmware---
HWhuaweiy6_pro_2019---
OShuaweiy6_pro_2019_firmware---
HWhuaweiy9_2019---
OShuaweiy9_2019_firmware---

Explore more

Back to dashboardgoogle CVEshuawei CVEsandroid vulnerabilities