PT-2019-16082

CVE-2019-2008

·

Published

2019-06-19

·

Updated

2021-07-21

Description by

CVSS 2.0
7.6
High
MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9
Description A memory corruption issue exists due to a race condition in the createEffect function of AudioFlinger.cpp. This could lead to local escalation of privilege with no additional execution privileges needed, requiring user interaction for exploitation.
Recommendations For Android versions 8.0 through 9, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')
CWE-787: Out-of-bounds Write
Related identifiers
CVE-2019-2008
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com