Out-of-Bound Read Vulnerability in Android OS by Google

CVE-2019-2037

Summary

In the Android operating system, a flaw exists within the l2cu_send_peer_config_rej function found in l2c_utils.cc. This vulnerability is characterized by the potential for an out-of-bound read caused by an inadequate bounds check. Exploiting this flaw could allow an attacker to gain access to sensitive information remotely without needing any additional execution privileges. Moreover, the vulnerability does not require user interaction, which increases the risk of exploitation.

References