CVE-2019-9429 - In profman, there is a possible out of bounds write due to memory corruption. This could lead to loc

CVE-2019-9429

Summary

In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110035108

References

https://source.android.com/security/bulletin/android-10

Vulnerable Configurations

cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 03-10-2019 - 16:53)
Impact:
Exploitability:

CWE

CWE-787

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

misc

https://source.android.com/security/bulletin/android-10

Last major update

03-10-2019 - 16:53

Published

27-09-2019 - 19:15

Last modified

03-10-2019 - 16:53