Vulnetix
Try Vulnetix Request Demo
CVE-2019-9254 PUBLISHED CVSS 7.800000190734863 HIGH

In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS 0.10% · 28.4th percentile

Risk Scores

CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.10%
28.4th percentile

Affected Products

VendorProductVersions
n/aAndroidAndroid-10
googleandroid10.0

Timeline

References

Open in Interactive Console →