CVE-2019-2182

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Android	Android kernel

References

Timeline

Published: Sep 6, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-21835.5In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This co CVE-2019-21848.8In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds check. This could lea CVE-2019-21858.8In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to CVE-2019-21868.8In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code CVE-2019-21875.5In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local in CVE-2019-21886.4In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with Syste CVE-2019-21896.4In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with Syste CVE-2019-21904.3In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead CVE-2019-21914.3In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead CVE-2019-21927.8In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation CVE-2019-21937.8In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This CVE-2019-21947.8In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead