CVE-2019-1997

In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value

published February 28, 2019

CVSS
—
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This could lead to local information disclosure via an insecure wireless connection with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-117508900.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00857 · 57.8th percentile
Published
2019-02-28T17:00Z
EPSS history
Timeline
  • 28 FEB 17:00Z
    In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value
    cvelistv5