VULNERABILITY INTELLIGENCE

CVE-2019-2232

CVSS score7.5 HIGH
EPSS probability1.07%
CISA KEVNot currently listed
Published2019-12-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead to remote denial of service when processing Unicode with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140632678

Weakness classification

  • CWE-20: Improper Input Validation
  • CWE-682: Incorrect Calculation

Primary references