CVE-2019-9345

In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

Score

CVSS 3.0 7.8 High

Status

Modified - security@android.com

Published

2019-09-06

Last modified

2024-08-04

Affected products

• Android (Google)

References

• https://source.android.com/security/bulletin/pixel/2019-09-01