First published: Fri Sep 27 2019(Updated: )
In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79593569
Credit: security@android.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | =10.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-9459 has a critical severity rating due to the potential for remote escalation of privilege.
To fix CVE-2019-9459, ensure that your Android device is updated to a patched version of Android that addresses this vulnerability.
CVE-2019-9459 specifically affects Android 10.0.
No, user interaction is not needed for the exploitation of CVE-2019-9459.
CVE-2019-9459 is classified as a heap buffer overflow vulnerability.