CVEvulnerability
CVE-2019-9263
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-09-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-862
Description
In telephony, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73136824
Affected configurations
• google android 10.0
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://source.android.com/security/bulletin/android-10 Vendor Advisory
- https://source.android.com/security/bulletin/android-10 Vendor Advisory