CVE-2020-0196

Name of the Vulnerable Software and Affected Versions Android versions Android-10

Description The issue is related to improper input validation in the RegisterNotificationResponse::GetEvent function, which could lead to a remote denial of service of the Bluetooth service over Bluetooth, without requiring additional execution privileges. User interaction is not needed for exploitation.

Recommendations For Android version Android-10, consider disabling the Bluetooth service until a patch is available to prevent remote denial of service attacks. Restrict access to the Bluetooth functionality to minimize the risk of exploitation. Avoid using the Bluetooth service in sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.