CERT-In Advisory
CIAD-2019-0033
Multiple Vulnerabilities in Google Android
Original Issue Date: November 06, 2019
Severity Rating: High
Software Affected
- Google Android versions 8.0, 8.1, 9 and 10
Overview
Multiple vulnerabilities have been reported in Google Android could allow a remote attacker to execute arbitrary code, gain elevated privileges or obtain sensitive information on the targeted system.
Description
These vulnerabilities exist in Framework, Library, Media framework, System, Kernel components, Qualcomm components and Qualcomm closed-source components of Google Android. A remote attacker could exploit these vulnerabilities by hosting a specially crafted file designed to exploit the vulnerabilities.
Successful exploitation of these vulnerabilities could allow the attacker to execute arbitrary code, gain elevated privileges or obtain sensitive information on the targeted system.
Solution
Apply appropriate over-the-air updates as mentioned in the following link.
https://source.android.com/security/bulletin/2019-11-01.html
Vendor Information
Android
https://source.android.com/security/bulletin/2019-11-01.html
References
Android
https://source.android.com/security/bulletin/2019-11-01.html
Softpedia
https://news.softpedia.com/news/google-outs-android-security-patch-for-november-2019-38-vulnerabilities-fixed-528105.shtml
CVE Name
CVE-2019-2036
CVE-2019-2192
CVE-2019-2193
CVE-2019-2195
CVE-2019-2196
CVE-2019-2197
CVE-2019-2198
CVE-2019-2199
CVE-2019-2201
CVE-2019-2202
CVE-2019-2203
CVE-2019-2204
CVE-2019-2205
CVE-2019-2206
CVE-2019-2207
CVE-2019-2208
CVE-2019-2209
CVE-2019-2211
CVE-2019-2212
CVE-2019-2213
CVE-2019-2233
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India
|