CVE-2019-2126: Double Free
In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability associated with CVE-2019-2126?
CVE-2019-2126 is a potential double free vulnerability in ParseContentEncodingEntry in mkvparser.cc, which could lead to remote code execution.
What software versions are affected by CVE-2019-2126?
CVE-2019-2126 affects several versions of Android (7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9.0), Fedora 30 and 31, and Ubuntu 16.04, 18.04, and 19.04.
What are the potential impacts of CVE-2019-2126?
The impact of CVE-2019-2126 includes the possibility of remote code execution without requiring additional execution privileges.
How can I mitigate the risks associated with CVE-2019-2126?
To mitigate the risks of CVE-2019-2126, it is recommended to update to the latest patched versions of the affected software.
Is user interaction required to exploit CVE-2019-2126?
Yes, user interaction is needed to exploit CVE-2019-2126.