CVE-2019-2127

In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

PT-2019-16219

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to possible memory corruption due to a use after free in the AudioInputDescriptor::setClientActive function. This could lead to local escalation of privilege with no additional...