CVE-2019-9336

Опубликовано: 27 сент. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112326322

Ссылки

https://source.android.com/security/bulletin/android-10
Vendor Advisory
https://source.android.com/security/bulletin/android-10
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00279

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-908

Связанные уязвимости