Google Android Framework Component Multiple Privilege Escalation Vulnerabilities

Bugtraq ID:	108552
Class:	Design Error
CVE:	CVE-2019-2090 CVE-2019-2091 CVE-2019-2092
Remote:	Yes
Local:	No
Published:	Jun 03 2019 12:00AM
Updated:	Jun 03 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Google Android 7.1.1 Google Android 9.0 Google Android 8.1 Google Android 8.0 Google Android 7.1.2 Google Android 7.0
Not Vulnerable:

Google Android Framework Component Multiple Privilege Escalation Vulnerabilities

Google Android is prone to multiple privilege-escalation vulnerabilities.

An attacker can exploit this issue to gain elevated privileges.

This issue is being tracked by Android Bug ID A-128599183, A-128599660 and A-128599668.

Google Android Framework Component Multiple Privilege Escalation Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Android Framework Component Multiple Privilege Escalation Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android Framework Component Multiple Privilege Escalation Vulnerabilities

References:

• Android Homepage (Google)
  
• Android Security Bulletin�??June 2019 (Android)