CVE-2022-20411
Published: 13 December 2022
Summary
CVE-2022-20411 is a high-severity Out-of-bounds Write (CWE-787) vulnerability in Google Android. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 15.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2022-20411 is an out-of-bounds write vulnerability in the function avdt_msg_asmbl within avdt_msg.cc of the Android Bluetooth stack. The flaw stems from a missing bounds check and affects Android versions 10 through 13. It is tracked under Android ID A-232023771 and carries a CVSS 3.1 base score of 8.8.
An attacker in Bluetooth range can exploit the issue over the adjacent network without authentication, user interaction, or additional privileges to achieve remote code execution on the device. The attack vector requires only proximity to the target and leverages the unauthenticated nature of the AVDTP message assembly path.
The December 2022 Android security bulletin addresses the issue and directs users to apply the corresponding patches released for each affected Android version. Devices should be updated to the patched builds listed in the bulletin to eliminate the vulnerable code path.
EPSS for the CVE rose from a low baseline to a peak of 0.0739 on 2025-12-11 before receding to the current value of 0.0224, indicating a measurable increase in observed exploitation interest well after initial disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-25671
Vulnerability details
In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…
more
AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-232023771
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.