Vulnerabilities > CVE-2019-1987 - Out-of-bounds Write vulnerability in Google Android

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
google
CWE-787
critical
NVD
Published: 2019-02-28
Updated: 2019-03-01

Summary

In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-118143775.

Vulnerable Configurations

Part Description Count
OS
Google
6

Common Weakness Enumeration (CWE)

The Hacker News

idTHN:E15EA77F64F9374B240CA8A7F340C67A
last seen2019-02-06
modified2019-02-06
published2019-02-06
reporterThe Hacker News
sourcehttps://thehackernews.com/2019/02/hack-android-with-image.html
titleAndroid Phones Can Get Hacked Just by Looking at a PNG Image

References