CVE-2019-2205

In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free

published November 13, 2019

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

🚨 A sneaky use-after-free vulnerability in Android could let an attacker execute code without needing any extra privileges! 🔥 Think of this like a restaurant where a dish is still served after the chef has left the kitchen — it might have a surprise ingredient that nobody asked for, and it could be disastrous! If exploited, an attacker could run arbitrary code on your device, which means they could do anything from stealing your personal data to installing malicious apps without you ever knowing. This vulnerability is like leaving the back door open for a burglar — it’s an invitation for someone to take complete control!

Put simply

Think of this like a restaurant where a dish is still served after the chef has left the kitchen — it might have a surprise ingredient that nobody asked for, and it could be disastrous! The flaw resides in ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, where a memory corruption issue can occur due to improper handling of memory, allowing attackers to run remote code.

What to do

If exploited, an attacker could run arbitrary code on your device, which means they could do anything from stealing your personal data to installing malicious apps without you ever knowing. This vulnerability is like leaving the back door open for a burglar — it’s an invitation for someone to take complete control! To protect your device, ensure you're running the latest version of Android available for your device. Regularly check for system updates and install them promptly! You’ve got this! By staying up-to-date, you can keep your device safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02864 · 86.7th percentile
Published
2019-11-13T17:37Z
EPSS history
Timeline
  • 13 NOV 17:37Z
    In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free
    cvelistv5