CVE-2019-2130: Critical severity android vulnerability

Published Aug 5, 2019

Updated

In CompilationJob::FinalizeJob of compiler.cc, there is a possible remote code execution due to type confusion. This could lead to escalation of privilege from a malicious proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-132073833.

Affected Software

7 affected components

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android

Event History

Aug 5, 2019

CVE Published

via Android·12:00 AM

Aug 20, 2019

CVE Published

via MITRE·07:50 PM

Data Sourced

via MITRE·07:50 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-2130?

CVE-2019-2130 has been classified as a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2019-2130?

To fix CVE-2019-2130, ensure that your Android device is updated to the latest version provided in the security updates.

Who is affected by CVE-2019-2130?

CVE-2019-2130 affects Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9.0 installed on devices.

What type of vulnerability is CVE-2019-2130?

CVE-2019-2130 is a type confusion vulnerability that can lead to remote code execution.

Is user interaction required for exploiting CVE-2019-2130?

No, user interaction is not needed for the exploitation of CVE-2019-2130.