CVE-2019-2110: Medium severity Google Android vulnerability
In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-69703445
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Devices running Android 9 are affected. Exploitation requires local access and a low-privileged attacker account or process.
What could an attacker obtain?
An attacker could capture content from a secure screen, resulting in disclosure of sensitive information. The issue does not provide integrity or availability impact according to the supplied CVSS vector.
Is user interaction or elevated execution privilege required?
No user interaction is required. The issue can be exploited without additional execution privileges beyond the low privileges required for local access.
How can I identify this issue in Android security tracking?
The Android issue identifier is A-69703445. The affected component is ScreenRotationAnimation in ScreenRotationAnimation.java.