VULNERABILITY INTELLIGENCE

CVE-2019-2188

CVSS score6.4 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2019-09-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112309571

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
  • CWE-787: Out-of-bounds Write

Primary references