CVE-2019-2104

In HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are uninitialized fields

published July 8, 2019

CVSS
—
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

In HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are uninitialized fields. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-131356202

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.7th percentile
Published
2019-07-08T17:34Z
EPSS history
Timeline
  • 08 JUL 17:34Z
    In HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are uninitialized fields
    cvelistv5