In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-122316913.
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2019-04-01 | Vendor Advisory |
Configurations
Information
Published : 2019-04-19 13:29
Updated : 2019-04-22 06:18
NVD link : CVE-2019-2040
Mitre link : CVE-2019-2040
JSON object : View
CWE
CWE-125
Out-of-bounds Read
Products Affected
- android