PT-2019-16132

CVE-2019-2029

·

Publicado

2019-04-19

·

Atualizado

2021-07-21

Descrição por

CVSS 3.1
8.8
Alta
MétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9
Description A memory corruption issue exists due to a use after free in the btm proc smp cback function of tm ble.cc. This could lead to remote code execution with no additional execution privileges needed. User interaction is required for exploitation.
Recommendations For Android versions 7.0 through 9, update to a version that contains a fix for this issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-416: Use After Free
CWE-787: Out-of-bounds Write
Identificadores relacionados
CVE-2019-2029
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com