{"id":"ASB-A-150156492","details":"In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-150156492","CVE-2020-0379"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2020-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd"}],"affected":[{"package":{"name":"platform/system/bt","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-09-01"}]}],"versions":["8.0"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd"],"severity":"High","spl":"2020-09-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"144631527352708785669605938533289903268","length":4072},"id":"ASB-A-150156492-4e443e5b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd","target":{"file":"stack/btm/btm_sec.cc","function":"btm_io_capabilities_req"}},{"source":"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd","target":{"file":"stack/btm/btm_sec.cc"},"deprecated":false,"digest":{"line_hashes":["170403460339393663498797094155322075723","194759784187504724530703011411003004957","258290883064267929184184251572495109104","63729842577290671678589660683592540801","197099341038339303623913830382604877363","1818040819886790657837025921044714679"],"threshold":0.9},"id":"ASB-A-150156492-cffe960e","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-150156492.json"}},{"package":{"name":"platform/system/bt","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"severity":"High","spl":"2020-09-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd","target":{"file":"stack/btm/btm_sec.cc"},"deprecated":false,"digest":{"line_hashes":["170403460339393663498797094155322075723","194759784187504724530703011411003004957","258290883064267929184184251572495109104","63729842577290671678589660683592540801","197099341038339303623913830382604877363","1818040819886790657837025921044714679"],"threshold":0.9},"id":"ASB-A-150156492-0747bc7e","signature_type":"Line"},{"deprecated":false,"digest":{"length":4072,"function_hash":"144631527352708785669605938533289903268"},"id":"ASB-A-150156492-e6b4cfec","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd","target":{"file":"stack/btm/btm_sec.cc","function":"btm_io_capabilities_req"}}],"fixes":["https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-150156492.json"}},{"package":{"name":"platform/system/bt","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-09-01"}]}],"versions":["9"],"ecosystem_specific":{"severity":"High","spl":"2020-09-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"144631527352708785669605938533289903268","length":4072},"id":"ASB-A-150156492-06f7d02c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd","target":{"function":"btm_io_capabilities_req","file":"stack/btm/btm_sec.cc"}},{"id":"ASB-A-150156492-c99b1149","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd","target":{"file":"stack/btm/btm_sec.cc"},"deprecated":false,"digest":{"line_hashes":["170403460339393663498797094155322075723","194759784187504724530703011411003004957","258290883064267929184184251572495109104","63729842577290671678589660683592540801","197099341038339303623913830382604877363","1818040819886790657837025921044714679"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-150156492.json"}},{"package":{"name":"platform/system/bt","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["170403460339393663498797094155322075723","194759784187504724530703011411003004957","258290883064267929184184251572495109104","63729842577290671678589660683592540801","197099341038339303623913830382604877363","1818040819886790657837025921044714679"]},"id":"ASB-A-150156492-1e960d8b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd","target":{"file":"stack/btm/btm_sec.cc"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd","target":{"function":"btm_io_capabilities_req","file":"stack/btm/btm_sec.cc"},"deprecated":false,"digest":{"length":4072,"function_hash":"144631527352708785669605938533289903268"},"id":"ASB-A-150156492-cd9efa39","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd"],"severity":"High","spl":"2020-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-150156492.json"}}],"schema_version":"1.9.0"}