PT-2019-16269

CVE-2019-2177

·

Publicado

2019-09-05

·

Atualizado

2019-09-06

Descrição por

CVSS 3.1
8.8
Alta
MétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions 7.1.1 through 9
Description The issue is related to a permissions bypass that could lead to remote code execution with no additional execution privileges needed. This is due to a possible device type confusion in the isPreferred method of HidProfile.java. User interaction is required for exploitation.
Recommendations For Android versions 7.1.1 through 9, update to a version that contains a fix for this issue to prevent remote code execution.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾