CVE-2019-2233

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error

published November 13, 2019

CVSS
—
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140486529

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00181 · 7.3th percentile
Published
2019-11-13T17:39Z
EPSS history
Timeline
  • 13 NOV 17:39Z
    In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error
    cvelistv5