CVE-2019-16253

The Text-to-speech Engine aka SamsungTTS application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755...

CVE-2019-16253

creationtimestamp| type| source ---|---|--- 2023-01-20 20:24:15+00:00| published-proof-of-concept| https://t.me/crackcodes/2341 2023-02-09 04:23:11+00:00| exploited| https://t.me/androidMalware/1755...

CVE-2019-16253

Samsung Text-to-Speech (SamsungTTS) prior to 3.0.02.7 and 3.0.00.101 on Android is vulnerable to local privilege escalation. The issue stems from how SamsungTTS handles data from the TTS engine and debugging/package-manager flags, allowing a local attacker to obtain system privileges (UID 1000) o...