VulnerabilityModified
CVE-2019-2088
This could lead to local information disclosure if UBSAN were not enabled, with no additional execution privileges needed.
MEDIUM 5.5EPSS 0.14%
Does this matter?
Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.
Description
In StatsService, there is a possible out of bounds read. This could lead to local information disclosure if UBSAN were not enabled, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-143895055
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.14% probability · 4th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- google/android
- Source
- security@android.com
References
- https://source.android.com/security/bulletin/android-10Vendor Advisory
- https://source.android.com/security/bulletin/android-10Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.