CVE-2019-2027: Critical severity android vulnerability

Published Apr 1, 2019

Updated

In floor0inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119120561.

Affected Software

7 affected components

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2019-04-01

Event History

Apr 1, 2019

CVE Published

via Android·12:00 AM

Apr 19, 2019

CVE Published

via MITRE·07:21 PM

Data Sourced

via MITRE·07:21 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-2027?

CVE-2019-2027 has a high severity rating due to its potential to allow remote code execution.

How do I fix CVE-2019-2027?

To mitigate CVE-2019-2027, update your Android device to the latest security patch that addresses this vulnerability.

Which versions of Android are affected by CVE-2019-2027?

CVE-2019-2027 affects Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9.0.

What could result from exploiting CVE-2019-2027?

Exploitation of CVE-2019-2027 could result in an out of bounds write, potentially leading to remote code execution.

Is user interaction required to exploit CVE-2019-2027?

Yes, user interaction is required for an attacker to exploit CVE-2019-2027.