Non notée
CVE-2019-2221 In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements…
Description
In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements due to incorrect handling of top activities in INITIALIZING state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138583650
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Android | Versions non publiées |
Autres CVE de Android
Les 2441 CVE de Android →
CVE-2023-21176
In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion
Non notée
CVE-2023-21177
In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is…
Non notée
CVE-2023-21175
In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due…
Non notée
CVE-2023-21156
In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation
Non notée