CVE-2019-2037

CVE-2019-2037 affects Android: the issue resides in l2cu_send_peer_config_rej in l2c_utils.cc, where an incorrect bounds check allows an out-of-bounds read, enabling remote information disclosure without extra privileges and without user interaction. Affected versions include Android 7.0, 7.1.1, ...