CVE-2019-2034: Integer Overflow

Published Apr 1, 2019

Updated

In rwi93smreadndef of rwi93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the NFC process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-122035770.

Affected Software

7 affected components

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2019-04-01

Event History

Apr 1, 2019

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Apr 19, 2019

CVE Published

via MITRE·07:38 PM

Data Sourced

via MITRE·07:38 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-2034?

CVE-2019-2034 has a moderate severity rating as it allows for local escalation of privileges.

How do I fix CVE-2019-2034?

To fix CVE-2019-2034, update your Android device to the latest available version that includes the security patches.

What versions of Android are affected by CVE-2019-2034?

CVE-2019-2034 affects Android versions 7.0 through 9.0.

Is user interaction required to exploit CVE-2019-2034?

Yes, user interaction is necessary for exploiting CVE-2019-2034.

What kind of vulnerability is CVE-2019-2034?

CVE-2019-2034 is an out-of-bounds write vulnerability caused by an integer overflow.