CVE-2019-2009 - CERT CVE
ID CVE-2019-2009
Sažetak In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120665616
Reference
CVSS
Base: 8.3
Impact: 10.0
Exploitability:6.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE COMPLETE COMPLETE
CVSS vektor AV:A/AC:L/Au:N/C:C/I:C/A:C
Zadnje važnije ažuriranje 21-06-2019 - 02:16
Objavljeno 19-06-2019 - 20:15