CVE-2019-1998: Medium severity android vulnerability

Published Feb 4, 2019

Updated

In eventhandler of keymasterapp.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local denial of service that is not fixed by a factory reset, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-116055338.

Affected Software

2 affected components

Google Android=9.0

Google Android

Event History

Feb 4, 2019

CVE Published

via Android·12:00 AM

Feb 28, 2019

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Data Sourced

via NVD·05:29 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-1998?

CVE-2019-1998 is categorized as a denial of service vulnerability that allows for potential resource exhaustion.

How do I fix CVE-2019-1998?

To resolve CVE-2019-1998, update your device to the latest version of Android that addresses this specific vulnerability.

What are the risks associated with CVE-2019-1998?

CVE-2019-1998 can lead to a local denial of service, where affected devices may experience operational issues that cannot be resolved through a factory reset.

Is user interaction required for exploiting CVE-2019-1998?

No, user interaction is not required to exploit CVE-2019-1998.

Which versions of Android are affected by CVE-2019-1998?

CVE-2019-1998 specifically affects Google Android version 9.0.