CVE-2019-2036: Critical severity android vulnerability

Published Nov 4, 2019

Updated

In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-79703832

Affected Software

5 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android

Event History

Nov 4, 2019

CVE Published

via Android·12:00 AM

Nov 13, 2019

CVE Published

via MITRE·05:44 PM

Data Sourced

via MITRE·05:44 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-2036?

CVE-2019-2036 is classified as a high severity vulnerability that allows for remote escalation of privilege.

How do I fix CVE-2019-2036?

To fix CVE-2019-2036, update your Android device to the latest security patch provided by Google.

Which Android versions are affected by CVE-2019-2036?

CVE-2019-2036 affects Android versions 8.0, 8.1, 9.0, and 10.0.

Can CVE-2019-2036 be exploited without user interaction?

Yes, CVE-2019-2036 can be exploited with no user interaction needed for exploitation.

What type of vulnerability is CVE-2019-2036?

CVE-2019-2036 is a permission bypass vulnerability due to an incorrect state check.