CVE-2019-2105
Last modified
CVE-2019-2105 is a vulnerability of currently unknown severity. In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. EPSS estimates a 0.71% chance of exploitation in the next 30 days.
Description
In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116114182.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 7.0 | |
| Android | 7.1.1 | |
| Android | 7.1.2 | |
| Android | 8.0 | |
| Android | 8.1 | |
| Android | 9.0 |
References
- https://source.android.com/security/bulletin/2019-07-01Vendor Advisory
- https://source.android.com/security/bulletin/2019-07-01Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-2105?
How severe is CVE-2019-2105?
How do I fix CVE-2019-2105?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-2098In areNotificationsEnabledForPackage of NotificationManagerS…
- CVE-2019-2099In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a pos…
- CVE-2019-2101In uvc_parse_standard_control of uvc_driver.c, there is a po…5.5
- CVE-2019-2102In the Bluetooth Low Energy (BLE) specification, there is a …
- CVE-2019-2103In Google Assistant in Android 9, there is a possible permis…
- CVE-2019-2104In HIDL, safe_union, and other C++ structs/unions being sent…
- CVE-2019-2106In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible…
- CVE-2019-2107In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a po…
- CVE-2019-2108In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there…
- CVE-2019-2109In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, ther…
- CVE-2019-2110In ScreenRotationAnimation of ScreenRotationAnimation.java, …5.5
- CVE-2019-2111In loop of DnsTlsSocket.cpp, there is a possible heap memory…
Are you affected by CVE-2019-2105?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST