Skip to content
OpenAdvisories
Unscored CVE-2019-9351 EUVD-2019-18726GHSA-wpq5-q23x-f88m

In SyncStatusObserver, there is a possible bypass for operating system protections that isolate user profiles from each other due to a miss…

Published Sep 27, 2019 · Updated Aug 4, 2024 · Assigned by google_android

Description

In SyncStatusObserver, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to local limited information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-128599864

Affected products

VendorProductAffectedFixed
— Android Android-10 —

References