CVE-2019-2105

In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data

published July 8, 2019

CVSS
—
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116114182.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00712 · 53.1th percentile
Published
2019-07-08T17:34Z
EPSS history
Timeline
  • 08 JUL 17:34Z
    In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data
    cvelistv5