CVE-2019-2228

medium

Description

In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-111210196

References

https://usn.ubuntu.com/4340-1/

https://source.android.com/security/bulletin/2019-12-01

https://lists.debian.org/debian-lts-announce/2019/12/msg00030.html

Details

Source: Mitre, NVD

Published: 2019-12-06

Updated: 2019-12-23

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium