CVE-2019-2204

In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. This could lead to remote code execution in the pacprocessor with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Version...

CVE-2019-2204

CVE-2019-2204 affects Android (Android versions 8.1 and 9). The issue is an out-of-bounds read in FindSharedFunctionInfo within objects.cc that can lead to remote code execution in pacprocessor without user interaction. This is a System component vulnerability with ATT&CK-agnostic remote code exe...