PT-2019-16225

CVE-2019-2133

·

Published

2019-08-20

·

Updated

2019-08-26

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9
Description The issue is related to a heap buffer overflow in the Mfc Transceive function of phNxpExtns MifareStd.cpp. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is required for exploitation.
Recommendations For Android versions 7.0 through 9, update to a version that contains a fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-787: Out-of-bounds Write
Related identifiers
CVE-2019-2133
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com