CVE-2019-2170 PUBLISHED CVSS 6.5 MEDIUM

In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118615735

EPSS 0.12% · 31.7th percentile

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
0.12%
31.7th percentile

Affected Products

VendorProductVersions
googleandroid10.0
n/aAndroidAndroid-10

Timeline

References

Open in Interactive Console →