CVE-2019-2023

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9

Description The issue is related to an insecure permissions check in the ServiceManager::add function within the hardware service manager. This check is based on the PID of the caller, which could be exploited by an app to add or replace a HAL service with its own, potentially gaining code execution in a privileged process.

Recommendations For Android versions 8.0 through 9, update to a version that includes the fix for this issue, as the current version may allow an app to gain code execution in a privileged process due to the insecure permissions check.