Remote RCE, Android 8.0-9.0 Bluetooth, CVE-2020-0022 (BlueFrag)

[Novel]

PoC: https://insinuator.net/wp-content/uploads/2020/04/cve_2020_0022_export.tar.gz

CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0022

Инфо: новость появилась ещё в феврале -

Critical Bluetooth Vulnerability in Android (CVE-2020-0022) – BlueFrag

On November 3rd, 2019, we have reported a critical vulnerability affecting the Android Bluetooth subsystem. This vulnerability has been assigned CVE-2020-0022 and was now patched in the latest security patch from February 2020. The security impact is as follows: On Android 8.0 to 9.0, a...

insinuator.net

PoC и разбор релизнули только сейчас - https://insinuator.net/2020/04/cve-2020-0022-an-android-8-0-9-0-bluetooth-zero-click-rce-bluefrag/

Ссылки: https://github.com/marcinguy/CVE-2020-0022

 

[DarckSol]

 

[tabac]

шикарный баг на самом деле )