CVE-2019-2197

In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value

published November 13, 2019

CVSS
—
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could lead to local information disclosure of the user's contact list with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-138529441

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00158 · 4.6th percentile
Published
2019-11-13T17:34Z
EPSS history
Timeline
  • 13 NOV 17:34Z
    In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value
    cvelistv5