CVE-2019-2006

In serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-116665972

Score
CVSS 3.0 9.8 Critical
Status
Modified - security@android.com
Published
2019-06-19
Last modified
2024-08-04
Weaknesses
CWE-362, CWE-416, CWE-787

Affected products

References

 
 
© AVABIS GmbH privacypolicy about