CVE-2019-2022
In rw_t3t_act_handle_fmt_rsp and rw_t3t_act_handle_sro_rsp of rw_t3t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120506143
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - security@android.com
- Published
- 2019-06-19
- Last modified
- 2024-08-04
- Weaknesses
- CWE-125
Affected products
References
- https://source.android.com/security/bulletin/2019-03-01
