PT-2020-10843
CVE-2019-2088
·
Published
2020-03-15
·
Updated
2020-03-17
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-10
Description
In StatsService, there is a possible out of bounds read. This could lead to local information disclosure if UBSAN were not enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.
Recommendations
For Android version Android-10, consider disabling the StatsService until a patch is available to prevent potential local information disclosure.
Found an issue in the description? Have something to add? Feel free to write us 👾