Permissions, Privileges, and Access Controls in Google Android - CVE-2019-9436
Published: September 7, 2019 / Updated: August 8, 2020
Vulnerability identifier: #VU35545
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-9436
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged user to execute arbitrary code.
In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation.
Affected software
Google Android
How to mitigate CVE-2019-9436
Install update from vendor's website.