CVE-2019-2173
HIGHAndroid 7.1.1-9 - Local Privilege Escalation via ActivityStarter Permission Check
Title source: llmDescription
In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-123013720
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2019-10-01
Scores
CVSS v3
7.8
EPSS
0.0016
EPSS Percentile
5.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-276
Status
published
Products (5)
google/android
7.1.1
google/android
7.1.2
google/android
8.0
google/android
8.1
google/android
9.0
Published
Oct 11, 2019
Tracked Since
Feb 18, 2026