deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-4321
Published: 2019-09-05
Description: IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for Waternamics V5.1.0 - V5.2.1.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 161201.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: http://www.ibm.com/support/docview.wss?uid=ibm10885901; https://exchange.xforce.ibmcloud.com/vulnerabilities/161201; http://www.ibm.com/support/docview.wss?uid=ibm10885901
CVE: CVE-2018-11569
Published: 2019-09-05
Description: Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/eventum/eventum/releases/tag/v3.5.2; https://github.com/eventum/eventum/releases/tag/v3.5.2
CVE: CVE-2019-15939
Published: 2019-09-05
Description: An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-369
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html; https://github.com/OpenCV/opencv/issues/15287; https://github.com/opencv/opencv/pull/15382
CVE: CVE-2019-15942
Published: 2019-09-05
Description: FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer.
CVSS Score: 8.8 (HIGH)
CWE: CWE-252
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html; https://security.gentoo.org/glsa/202007-58; https://trac.ffmpeg.org/ticket/8093
CVE: CVE-2019-13190
Published: 2019-09-05
Description: In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://blog.contentsecurity.com.au/knowage-captcha-bypass; https://blog.contentsecurity.com.au/knowage-captcha-bypass
CVE: CVE-2019-13361
Published: 2019-09-05
Description: Smanos W100 1.0.0 devices have Insecure Permissions, exploitable by an attacker on the same Wi-Fi network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://github.com/lodi-g/CVE-2019-13361/; https://github.com/lodi-g/CVE-2019-13361/
CVE: CVE-2019-15945
Published: 2019-09-05
Description: OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2019/12/29/1; https://github.com/OpenSC/OpenSC/commit/412a6142c27a5973c61ba540e33cdc22d5608e68; https://github.com/OpenSC/OpenSC/compare/f1691fc...12218d4
CVE: CVE-2019-15946
Published: 2019-09-05
Description: OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2019/12/29/1; https://github.com/OpenSC/OpenSC/commit/a3fc7693f3a035a8a7921cffb98432944bb42740; https://github.com/OpenSC/OpenSC/compare/f1691fc...12218d4
CVE: CVE-2019-15947
Published: 2019-09-05
Description: In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2019-15947; https://gist.github.com/oxagast/50a121b2df32186e0c48411859d5861b; https://github.com/bitcoin/bitcoin/issues/16824
CVE: CVE-2019-15949
Published: 2019-09-05
Description: Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user. A user logged into Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executable and insert malicious commands to execute as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/156676/Nagios-XI-Authenticated-Remote-Command-Execution.html; http://packetstormsecurity.com/files/162158/Nagios-XI-getprofile.sh-Remote-Command-Execution.html; https://github.com/jakgibb/nagiosxi-root-rce-exploit
CVE: CVE-2019-5065
Published: 2019-09-05
Description: An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0854; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0854
CVE: CVE-2019-5069
Published: 2019-09-05
Description: A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0858; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0858
CVE: CVE-2019-5070
Published: 2019-09-05
Description: An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0859; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0859
CVE: CVE-2019-13187
Published: 2019-09-05
Description: The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://symphonyextensions.com/extensions/richtext_redactor/; https://blog.contentsecurity.com.au/redactor-unrestricted-file-upload; http://symphonyextensions.com/extensions/richtext_redactor/
CVE: CVE-2019-13188
Published: 2019-09-05
Description: In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://blog.contentsecurity.com.au/knowage-access-control-bypass; https://blog.contentsecurity.com.au/knowage-access-control-bypass
CVE: CVE-2019-13191
Published: 2019-09-05
Description: A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search/Refine/Set page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://blog.contentsecurity.com.au/mapcontrol-sql-injection; https://blog.contentsecurity.com.au/mapcontrol-sql-injection
CVE: CVE-2019-13349
Published: 2019-09-05
Description: In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522
References: https://blog.contentsecurity.com.au/knowage-password-hash-disclosure; https://blog.contentsecurity.com.au/knowage-password-hash-disclosure
CVE: CVE-2019-14278
Published: 2019-09-05
Description: In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.contentsecurity.com.au/knowage-user-enumeration; https://blog.contentsecurity.com.au/knowage-user-enumeration
CVE: CVE-2019-15952
Published: 2019-09-05
Description: An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to include .html files that are outside the permitted directory. Also, if a page contains a template directive, then the directive will be server side processed. Thus, if a user can control the content of a .html file, then they can inject a payload with a malicious template directive to gain Remote Command Execution. The exploit will work only with the .html extension.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/154340/Totaljs-CMS-12.0-Path-Traversal.html; http://seclists.org/fulldisclosure/2019/Sep/11; https://github.com/beerpwn/CVE/blob/master/Totaljs_disclosure_report/report_final.pdf
CVE: CVE-2019-15953
Published: 2019-09-05
Description: An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertical and horizontal privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://github.com/beerpwn/CVE/blob/master/Totaljs_disclosure_report/report_final.pdf; https://seclists.org/fulldisclosure/2019/Sep/6; https://github.com/beerpwn/CVE/blob/master/Totaljs_disclosure_report/report_final.pdf
CVE: CVE-2019-15954
Published: 2019-09-05
Description: An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be evaluated server side. In the process of evaluating the tag by the back-end, it is possible to escape the sandbox object by using the following payload: <script total>global.process.mainModule.require(child_process).exec(RCE);</script>
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-862
References: http://packetstormsecurity.com/files/154924/Total.js-CMS-12-Widget-JavaScript-Code-Injection.html; https://github.com/beerpwn/CVE/blob/master/Totaljs_disclosure_report/report_final.pdf; https://seclists.org/fulldisclosure/2019/Sep/5
CVE: CVE-2019-15955
Published: 2019-09-05
Description: An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple transformation of a cookie to obtain the random values inside it. If an attacker can discover a session cookie owned by an admin, then it is possible to brute force it with O(n)=2n instead of O(n)=n^x complexity, and steal the admin password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327, CWE-330
References: https://github.com/beerpwn/CVE/blob/master/Totaljs_disclosure_report/report_final.pdf; https://seclists.org/fulldisclosure/2019/Sep/3; https://github.com/beerpwn/CVE/blob/master/Totaljs_disclosure_report/report_final.pdf
CVE: CVE-2019-10753
Published: 2019-09-05
Description: In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclipse-groovy, Spotless was resolving dependencies over an insecure channel (http). If the build occurred over an insecure connection, a malicious user could have perform a Man-in-the-Middle attack during the build and alter the build artifacts that were produced. In case that any of these artifacts were compromised, any developers using these could be altered. **Note:** In order to validate that this artifact was not compromised, the maintainer would need to confirm that none of the artifacts published to the registry were not altered with. Until this happens, we can not guarantee that this artifact was not compromised even though the probability that this happened is low.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-669
References: https://snyk.io/vuln/SNYK-JAVA-COMDIFFPLUGSPOTLESS-460377; https://snyk.io/vuln/SNYK-JAVA-COMDIFFPLUGSPOTLESS-460377
CVE: CVE-2019-14339
Published: 2019-09-05
Description: The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key.
CVSS Score: 5.5 (MEDIUM)
References: http://packetstormsecurity.com/files/154266/Canon-PRINT-2.5.5-URI-Injection.html; https://play.google.com/store/apps/details?id=jp.co.canon.bsd.ad.pixmaprint&hl=en_US; http://packetstormsecurity.com/files/154266/Canon-PRINT-2.5.5-URI-Injection.html
CVE: CVE-2019-15848
Published: 2019-09-05
Description: JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com/teamcity/2019/09/important-security-notice-xss-vulnerability-allowing-rce/; https://gist.github.com/JLLeitschuh/fe[PII_REDACTED]b58de680bbda78a04a70; https://twitter.com/JLLeitschuh/status/[PII_REDACTED]12644864?s=20
CVE: CVE-2019-15944
Published: 2019-09-05
Description: In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-116
References: https://blog.counter-strike.net/index.php/2019/08/25353/; https://blog.counter-strike.net/index.php/2019/08/25353/
CVE: CVE-2019-11380
Published: 2019-09-05
Description: The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage.
CVSS Score: 7.5 (HIGH)
References: https://medium.com/%40bhaveshthakur2015/cve-2019-11380-how-i-was-able-to-access-complete-storage-of-es-fileexplorer-end-user-9bd8da5ac3b8; https://medium.com/%40bhaveshthakur2015/cve-2019-11380-how-i-was-able-to-access-complete-storage-of-es-fileexplorer-end-user-9bd8da5ac3b8
CVE: CVE-2019-15029
Published: 2019-09-05
Description: FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET request with the service id followed by the parameter a=start to execute the stored command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://drive.google.com/file/d/1bt08NSUaxu87LJJGdNd7LpvZ2uGauRK8/view?usp=sharing; https://gist.github.com/mhaskar/7a6a804cd68c7fec4f9d1f5c3507900f; https://shells.systems/fusionpbx-v4-4-8-authenticated-remote-code-execution-cve-2019-15029/
CVE: CVE-2019-14222
Published: 2019-09-05
Description: An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations. An attacker could exploit this vulnerability by using the extracted private key and bundling it into a PKCS12. A successful exploit could allow the attacker to gain information about the target system (e.g., OS type, system file locations, Java version, Solr version, etc.) as well as the ability to launch further attacks by leveraging the access to Alfresco's Solr Web Admin Interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14222-Default%20Certificate-Alfresco%20Community; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14222-Default%20Certificate-Alfresco%20Community
CVE: CVE-2019-14224
Published: 2019-09-05
Description: An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim machine. The attacker must upload malicious Solr configuration files and then receive a JMX connection from the victim, and serve a Java object that results in deserialization and code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14224-Authenticated%20Remote%20Code%20Execution-Alfresco%20Community; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14224-Authenticated%20Remote%20Code%20Execution-Alfresco%20Community
CVE: CVE-2019-2103
Published: 2019-09-05
Description: In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAG_SECURE. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2108
Published: 2019-09-05
Description: In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2115
Published: 2019-09-05
Description: In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415, CWE-787
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2123
Published: 2019-09-05
Description: In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privileged process due to a memory overwrite. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2124
Published: 2019-09-05
Description: In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure.
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2174
Published: 2019-09-05
Description: In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2175
Published: 2019-09-05
Description: In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2176
Published: 2019-09-05
Description: In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2177
Published: 2019-09-05
Description: In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions bypass. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-275
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2178
Published: 2019-09-05
Description: In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2179
Published: 2019-09-05
Description: In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-190
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2180
Published: 2019-09-05
Description: In ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the printer service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-2181
Published: 2019-09-05
Description: In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html; https://source.android.com/security/bulletin/2019-09-01; https://usn.ubuntu.com/4157-1/
CVE: CVE-2019-9254
Published: 2019-09-05
Description: In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-77
References: https://source.android.com/security/bulletin/2019-09-01; https://source.android.com/security/bulletin/2019-09-01