Out of Bounds Write Vulnerability in Android Products by Google
CVE-2019-2027

8.8HIGH

Key Information:

Vendor

Android

Status
Android
Vendor
CVE Published:
19 April 2019

What is CVE-2019-2027?

An out of bounds write vulnerability exists in the floor0_inverse1 function of floor0.c in Google's Android operating system. This flaw arises from insufficient checks on memory boundaries, which can be exploited to execute arbitrary code remotely. While exploiting this vulnerability necessitates user interaction, it does not require additional execution privileges. The affected versions include various Android releases, specifically 7.0 through 9. Hence, device users must remain vigilant by ensuring their systems are up to date to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Android Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9

References

https://source.android.com/security/bulletin/2019-04-01
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.