CVE-2019-9453

MEDIUM

Android - Local Information Disclosure via F2FS Touch Driver Input Validation

Title source: llm
STIX 2.1

Description

In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_misc
https://source.android.com/security/bulletin/pixel/2019-09-01
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4527-1/

Scores

CVSS v3 4.4
EPSS 0.0004
EPSS Percentile 10.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-20
Status published
Products (3)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
google/android
Published Sep 06, 2019
Tracked Since Feb 18, 2026