CVE-2019-1987
28.02.2019, 17:29
In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-118143775.Enginsight
| Vendor | Product | Version |
|---|---|---|
| android | 7.0 | |
| android | 7.1.1 | |
| android | 7.1.2 | |
| android | 8.0 | |
| android | 8.1 | |
| android | 9.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||
| firefox |
| ||||||||||
| mozjs38 |
| ||||||||||
| mozjs52 |
| ||||||||||
| mozjs60 |
| ||||||||||
| qtwebengine-opensource-src |
| ||||||||||
| thunderbird |
|
Common Weakness Enumeration