PT-2019-19586 · Google · Libskia+1

Publicado 2019-09-27 · Atualizado 2021-07-21 · CVE-2019-9372

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Android versions Android-10

Description The issue is related to a missing null check in libskia, which could cause a crash. This might lead to a remote denial of service, and no additional execution privileges are required. User interaction is necessary for exploitation.

Recommendations For Android version Android-10, update to a version that includes the fix for the missing null check in libskia to prevent potential crashes and denial of service.

Correção

NULL Pointer Dereference

Unchecked Return Value

Enumeração de Fraquezas

CWE-476

CWE-252

Identificadores relacionados

CVE-2019-9372

Produtos afetados

Android

Libskia

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-9372 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9372 · Aviso do Fabricante
• https://source.android.com/security/bulletin/android-10 · Aviso do Fabricante