CVE-2019-9273

MEDIUM

Android - Use-After-Free in synaptics_dsx_htc Touchscreen Driver

Title source: llm
STIX 2.1

Description

In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

References (1)

Core 1
Core References

Scores

CVSS v3 6.7
EPSS 0.0014
EPSS Percentile 3.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-416 CWE-667
Status published
Products (1)
google/android
Published Sep 06, 2019
Tracked Since Feb 18, 2026