High severity8.8NVD Advisory· Published Nov 10, 2020· Updated Jun 17, 2026
CVE-2020-0449
CVE-2020-0449
Description
In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-162497143
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*
- (no CPE)range: Android-9, Android-10, Android-11, Android-8.0, Android-8.1
- Android/Androiddescription
Patches
Vulnerability mechanics
References
1- source.android.com/security/bulletin/2020-11-01nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.