CVE-2019-2011

In readNullableNativeHandleNoDup of Parcel.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-2011

CVE-2019-2011 affects Android 8.0–9, with a vulnerable code path in Parcel.cpp: readNullableNativeHandleNoDup, where a missing bounds check can cause an out-of-bounds write. This yields local escalation of privilege with no extra privileges or user interaction required. Impact is described as EoP...