CVE-2019-2014

CVE-2019-2014 is a local elevation-of-privilege vulnerability in Android’s rw_t3t_handle_get_sc_poll_rsp path (rw_t3t.cc), caused by a missing bounds check that can enable an out-of-bounds write. Affected products include Android 7.0–9, with exploitation requiring user interaction. The issue is c...