Skip to content
OpenAdvisories
Unscored CVE-2019-2004 EUVD-2019-11646GHSA-6xgp-xr93-h7m8

In publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp, there are uninitialized data leading to local…

Published Jun 19, 2019 · Updated Aug 4, 2024 · Assigned by google_android

Description

In publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp, there are uninitialized data leading to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-115739809

Affected products

VendorProductAffectedFixed
— Android Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 —

References