CVE-2019-9384

In LockPatternUtils, there is a possible escalation of privilege due to an improper permissions check. This could lead to local bypass of the Lockguard with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120568007

Score

CVSS 3.1 6.7 Medium

Status

Modified - security@android.com

Published

2019-09-27

Last modified

2024-08-04

Affected products

• Android (Google)

References

• https://source.android.com/security/bulletin/android-10