CVE-2019-1993: Integer Overflow

Published Feb 4, 2019

Updated

In registerapp of btifhd.cc, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-119819889.

Affected Software

4 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android

Event History

Feb 4, 2019

CVE Published

via Android·12:00 AM

Feb 28, 2019

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Data Sourced

via NVD·05:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-1993?

CVE-2019-1993 is classified as a high severity vulnerability due to the potential for local escalation of privilege.

How do I fix CVE-2019-1993?

To fix CVE-2019-1993, ensure that your Android device is updated to the latest security patch provided by the manufacturer.

What causes CVE-2019-1993?

CVE-2019-1993 is caused by a memory corruption issue resulting from an integer overflow in the register_app function.

Who is affected by CVE-2019-1993?

CVE-2019-1993 affects users on Android versions 8.0, 8.1, and 9.0.

Is user interaction required for exploiting CVE-2019-1993?

No, user interaction is not needed for exploitation of CVE-2019-1993.