CVE-2019-2088

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In StatsService, there is a possible out of bounds read. This could lead to local information disclosure if UBSAN were not enabled, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-143895055

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Mar 15, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-208807.5An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service (memorCVE-2019-208817.3An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA.CVE-2019-208825.3An issue was discovered in Mattermost Server before 5.8.0. It does not honor the domain requirement when processing a join request for an opCVE-2019-208834.3An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only. Users can pin or unpin a post.CVE-2019-208845.3An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post.CVE-2019-208857.5An issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots.txt file.CVE-2019-208867.5An issue was discovered in Mattermost Server before 5.8.0. The first user is sometimes inadvertently a system admin.CVE-2019-208874.3An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding wCVE-2019-208887.5An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service (memory CVE-2019-208895.3An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It mishandles permissions for user-access token creation.CVE-2019-20897.8In app uninstallation, there is a possible set of permissions that may not be removed from a shared app ID. This could lead to a local escalCVE-2019-208904.3An issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address discovery restrictions.