PT-2019-16132

CVE-2019-2029

·

Published

2019-04-19

·

Updated

2021-07-21

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9
Description A memory corruption issue exists due to a use after free in the btm proc smp cback function of tm ble.cc. This could lead to remote code execution with no additional execution privileges needed. User interaction is required for exploitation.
Recommendations For Android versions 7.0 through 9, update to a version that contains a fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-416: Use After Free
CWE-787: Out-of-bounds Write
Related identifiers
CVE-2019-2029
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com