CVE-2019-12936

HIGH

BlueStacks App Player < 4.90 - DNS Rebinding via Exposed IPC Functions

Title source: llm
STIX 2.1

Description

BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions.

References (2)

Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://support.bluestacks.com/hc/en-us/articles/360021469391-Release-Notes

Scores

CVSS v3 7.1
EPSS 0.0348
EPSS Percentile 87.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (1)
bluestacks/bluestacks_app_player < 4.90
Published Jun 23, 2019
Tracked Since Feb 18, 2026