CVE-2019-2027
published 2019-04-19CVE-2019-2027: In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no…
PriorityP347high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
EPSS
1.22%
65.7th percentile
In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119120561.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | android | — | — |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2019-2027: Android Security Bulletin 2019-04-01
CVE: CVE-2019-2027
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 7
vendor_android·2019-04-01·CVSS 8.8
CVE-2019-2027 [HIGH] CVE-2019-2027: Android Security Bulletin 2019-04-01
CVE: CVE-2019-2027
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 7
Android Security Bulletin 2019-04-01
CVE: CVE-2019-2027
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9
References: A-119120561
GHSA
GHSA-8jcq-wgr6-r6hc: In floor0_inverse1 of floor0
ghsa_unreviewed·2022-05-24
CVE-2019-2027 [HIGH] CWE-787 GHSA-8jcq-wgr6-r6hc: In floor0_inverse1 of floor0
In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119120561.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-04-19
Published