PT-2019-16191
CVE-2019-2097
·
Publicado
2019-06-07
·
Atualizado
2021-07-21
Descrição por
CVSS 2.0
10
CríticaMétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions 7.0 through 9
Description
The issue is related to possible memory corruption due to type confusion in the HAliasAnalyzer.Query function. This could lead to remote code execution from a malicious proxy configuration, with no additional execution privileges needed. User interaction is not required for exploitation.
Recommendations
For Android versions 7.0 through 9, update to a version that contains a fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾