PT-2019-16196

CVE-2019-2104

·

Published

2019-07-08

·

Updated

2021-07-21

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9
Description The issue concerns uninitialized fields in certain C++ structs/unions, including safe union, which are sent to application processes. This could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations For Android versions 8.0 through 9, update to a version that contains a fix for this issue to prevent local information disclosure.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾