CVE-2019-2040: Medium severity android vulnerability

Published Apr 1, 2019

Updated

In rwi93processextsysinfo of rwi93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-122316913.

Affected Software

2 affected components

Google Android=9.0

Google Android

Event History

Apr 1, 2019

CVE Published

via Android·12:00 AM

Apr 19, 2019

CVE Published

via MITRE·07:43 PM

Data Sourced

via MITRE·07:43 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-2040?

CVE-2019-2040 is considered a medium severity vulnerability due to its potential for local information disclosure.

How do I fix CVE-2019-2040?

To fix CVE-2019-2040, ensure that you update your Android device to a security patch that addresses this vulnerability.

What versions of Android are affected by CVE-2019-2040?

CVE-2019-2040 affects Android version 9.0.

What is the nature of the vulnerability in CVE-2019-2040?

CVE-2019-2040 involves a possible out-of-bounds read due to a missing bounds check in the rw_i93_process_ext_sys_info function.

Is user interaction required to exploit CVE-2019-2040?

Yes, user interaction is required to exploit CVE-2019-2040.