CVE-2019-2189

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112312381

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-21904.3In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead CVE-2019-21914.3In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead CVE-2019-21927.8In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation CVE-2019-21937.8In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This CVE-2019-21947.8In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead CVE-2019-21957.8In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due to improper input validation. This could leCVE-2019-21965.5In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no additional execution privilegCVE-2019-21975.5In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could CVE-2019-21985.5In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure with no additional exCVE-2019-21996.7In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of priCVE-2019-22007.3In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permission from another appCVE-2019-22017.8In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This co
CVE-2019-2189: Medium severity, CVSS 6.4 | Vulnix