CVE-2019-2131
published 2019-08-20CVE-2019-2131: An application with overlay permission can display overlays on top of settings UI. This could lead to local escalation of privilege with no additional…
PriorityP335high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
0.52%
41.3th percentile
An application with overlay permission can display overlays on top of settings UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119115683.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2019-2131: Android Security Bulletin 2019-08-01
CVE: CVE-2019-2131
Severity: HIGH
Type: EoP
Affected AOSP versions: 7
vendor_android·2019-08-01·CVSS 7.8
CVE-2019-2131 [HIGH] CVE-2019-2131: Android Security Bulletin 2019-08-01
CVE: CVE-2019-2131
Severity: HIGH
Type: EoP
Affected AOSP versions: 7
Android Security Bulletin 2019-08-01
CVE: CVE-2019-2131
Severity: HIGH
Type: EoP
Affected AOSP versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9
References: A-119115683
GHSA
GHSA-9w64-42h9-47g5: An application with overlay permission can display overlays on top of settings UI
ghsa_unreviewed·2022-05-24
CVE-2019-2131 [HIGH] GHSA-9w64-42h9-47g5: An application with overlay permission can display overlays on top of settings UI
An application with overlay permission can display overlays on top of settings UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119115683.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-08-20
Published