CVE-2019-2103

In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAG_SECURE. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Link Resource
https://source.android.com/security/bulletin/2019-09-01 Patch Vendor Advisory
Configurations

Configuration 1

cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*

Information

Published : 2019-09-05 10:15

Updated : 2019-09-06 06:04


NVD link : CVE-2019-2103

Mitre link : CVE-2019-2103

Products Affected
No products.
CWE