In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-119496789.
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2019-04-01 | Patch Vendor Advisory |
Configurations
Information
Published : 2019-04-19 13:29
Updated : 2019-04-22 09:29
NVD link : CVE-2019-2030
Mitre link : CVE-2019-2030
JSON object : View
CWE
CWE-416
Use After Free
Products Affected
- android