cvelist/2019/2xxx/CVE-2019-2044.json

62 lines
2.1 KiB
JSON
Raw Normal View History

2018-12-10 10:08:48 -05:00
{
2019-05-08 17:00:46 +00:00
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
2019-03-18 00:57:23 +00:00
"CVE_data_meta": {
"ID": "CVE-2019-2044",
2019-05-08 17:00:46 +00:00
"ASSIGNER": "security@android.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "Android",
"version": {
"version_data": [
{
"version_value": "Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Remote code execution"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://source.android.com/security/bulletin/2019-05-01",
"url": "https://source.android.com/security/bulletin/2019-05-01"
}
]
2019-03-18 00:57:23 +00:00
},
"description": {
"description_data": [
{
"lang": "eng",
2019-05-08 17:00:46 +00:00
"value": "In MakeMP>G4VideoCodecSpecificData of APacketSource.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-123701862"
2019-03-18 00:57:23 +00:00
}
]
}
}