CVE-2019-2233

CVE-2019-2233 affects Android 10. In UserSwitcherController.java’s getUserCount/getCount, a logic error could allow creation of a new user, enabling local privilege escalation for an attacker with physical access and no extra execution privileges or user interaction required. CVSSv3.1 base score ...

CVE-2019-2233: Undefined Security Weakness

In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not...