PT-2019-16269

CVE-2019-2177

·

Published

2019-09-05

·

Updated

2019-09-06

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions 7.1.1 through 9
Description The issue is related to a permissions bypass that could lead to remote code execution with no additional execution privileges needed. This is due to a possible device type confusion in the isPreferred method of HidProfile.java. User interaction is required for exploitation.
Recommendations For Android versions 7.1.1 through 9, update to a version that contains a fix for this issue to prevent remote code execution.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾