CVE-2019-2212: Medium severity Google Android vulnerability
Published Nov 4, 2019
·Updated
In poissondistribution of random, there is an out of bounds read. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139690488
Affected Software
5 affected components
Google Android=8.0
Google Android=8.1
Google Android=9.0
Google Android=10.0
Google Android
Event History
Nov 4, 2019
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Nov 13, 2019
CVE Published
via MITRE·05:42 PM
Data Sourced
via MITRE·05:42 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-2212?
CVE-2019-2212 has a moderate severity level due to potential local information disclosure.
2
What are the affected versions for CVE-2019-2212?
CVE-2019-2212 affects Android versions 8.0, 8.1, 9.0, and 10.0.
3
How do I fix CVE-2019-2212?
To fix CVE-2019-2212, update your Android device to the latest available security patch.
4
What type of vulnerability is CVE-2019-2212?
CVE-2019-2212 is an out of bounds read vulnerability in the poisson_distribution function of random.
5
Can CVE-2019-2212 be exploited without user interaction?
Yes, CVE-2019-2212 can be exploited without any user interaction required.