Skip to content
OpenAdvisories
Unscored CVE-2019-9281 EUVD-2019-18656GHSA-pv35-qw98-98c8

In GoogleContactsSyncAdapter, there is a possible path traversal due to improper input sanitization. This could lead to a bypass of user in…

Published Sep 27, 2019 · Updated Aug 4, 2024 · Assigned by google_android

Description

In GoogleContactsSyncAdapter, there is a possible path traversal due to improper input sanitization. This could lead to a bypass of user interaction requirements with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-32748076

Affected products

VendorProductAffectedFixed
— Android Android-10 —

References