CVE-2019-9316

Medium

In libstagefright, there is a missing variable initialization. This could lead to remote information disclosure with no additional…

google_android·CWE-909·Published 2019-09-27

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

264 chars

In libstagefright, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112052432

NVDen

264 chars

NVDes

321 chars

En libstagefright, se presenta una falta de inicialización de variable. Esto podría conllevar a una divulgación de información remota sin ser necesarios privilegios de ejecución adicionales. Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-10, ID de Android: A-112052432

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N