Out-of-bounds Read Vulnerability in Android Kernel by Google

CVE-2019-2101

What is CVE-2019-2101?

A vulnerability exists in the Android kernel where improper input validation in the uvc_parse_standard_control function can lead to an out-of-bounds read. This flaw allows for potential local information disclosure, requiring no additional execution privileges or user interaction for exploitation. Users running affected versions of the Android kernel should apply the necessary patches to mitigate this risk.

References