CVE-2019-2192: Input Validation

Published Nov 4, 2019

Updated

In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-138441555

Affected Software

3 affected components

Google Android=9.0

Google Android=10.0

Google Android

Event History

Nov 4, 2019

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Nov 13, 2019

CVE Published

via MITRE·05:30 PM

Data Sourced

via MITRE·05:30 PM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs local access and low-level privileges on an affected Android device. No user interaction or additional execution privileges are required.

Which Android versions are affected?

The affected versions listed are Android 9 and Android 10.

What is the potential impact after exploitation?

Successful exploitation can result in local escalation of privilege through a permissions bypass, with high impact to confidentiality, integrity, and availability.

CVE-2019-2192: Input Validation

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which Android versions are affected?

What is the potential impact after exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which Android versions are affected?

What is the potential impact after exploitation?