CVE-2019-2194

In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-2194

CVE-2019-2194 affects Android 9, specifically SurfaceFlinger::createLayer in SurfaceFlinger.cpp. The issue is an improper cast that can enable arbitrary code execution and local escalation of privileges without user interaction. Affected component is the Android graphics stack (SurfaceFlinger). T...