CVE-2022-20021

Description

In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198513; Issue ID: ALPS06198513.

Reserved 2021-10-12 | Published 2022-01-04 | Updated 2024-08-03 | Assigner MediaTek

Problem types

Denial of Service

Product status

Android 10.0, 11.0
affected

References

corp.mediatek.com/product-security-bulletin/January-2022

cve.org (CVE-2022-20021)

nvd.nist.gov (CVE-2022-20021)

Download JSON