PT-2019-16281 · Lg · Android Kernel

Publicado 2019-09-27 · Atualizado 2021-07-21 · CVE-2019-2191

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to a missing bounds check in LG's LAF component, which could lead to a leak of information in a protected disk partition. This might result in local information disclosure via USB, requiring User execution privileges for exploitation. User interaction is not necessary for this issue to be exploited.

Recommendations For Android kernel, consider applying a patch or fix that addresses the missing bounds check in LG's LAF component to prevent potential information disclosure.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2019-2191

Produtos afetados

Android Kernel

Referências · 3

• https://source.android.com/security/bulletin/pixel/2019-09-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-2191 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-2191 · Aviso do Fabricante