Vulnerabilities > CVE-2019-1987 - Out-of-bounds Write vulnerability in Google Android

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
google
CWE-787
NVD
Published: 2019-02-28
Updated: 2024-11-21

Summary

In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-118143775.

Vulnerable Configurations

Part Description Count
OS
Google
6

Common Weakness Enumeration (CWE)

The Hacker News

idTHN:E15EA77F64F9374B240CA8A7F340C67A
last seen2019-02-06
modified2019-02-06
published2019-02-06
reporterThe Hacker News
sourcehttps://thehackernews.com/2019/02/hack-android-with-image.html
titleAndroid Phones Can Get Hacked Just by Looking at a PNG Image

References