CVEvulnerability
CVE-2019-2228
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-12-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-125
Description
In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-111210196
Affected configurations
• google android 8.0
• google android 8.1
• google android 9.0
• google android 10.0
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://lists.debian.org/debian-lts-announce/2019/12/msg00030.html lists.debian.org
- https://source.android.com/security/bulletin/2019-12-01 Vendor Advisory
- https://usn.ubuntu.com/4340-1/ usn.ubuntu.com
- https://lists.debian.org/debian-lts-announce/2019/12/msg00030.html lists.debian.org
- https://source.android.com/security/bulletin/2019-12-01 Vendor Advisory
- https://usn.ubuntu.com/4340-1/ usn.ubuntu.com