Vulnerabilities > CVE-2019-1988 - Out-of-bounds Write vulnerability in Google Android 8.0/8.1/9.0

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
google
CWE-787
critical
NVD
Published: 2019-02-28
Updated: 2021-07-21

Summary

In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in system_server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-118372692.

Vulnerable Configurations

Part Description Count
OS
Google
3

Common Weakness Enumeration (CWE)

The Hacker News

idTHN:E15EA77F64F9374B240CA8A7F340C67A
last seen2019-02-06
modified2019-02-06
published2019-02-06
reporterThe Hacker News
sourcehttps://thehackernews.com/2019/02/hack-android-with-image.html
titleAndroid Phones Can Get Hacked Just by Looking at a PNG Image

References