high7.8Public exploit code
CVE-2019-2023
In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Android - getpidcon() Usage in Hardware binder ServiceManager Permits ACL Bypass2019-03-06 · dos · android · Verified
Impact
In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could allow an app to add or replace a HAL service with its own service, gaining code execution in a privileged process.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-121035042Upstream kernel
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 8.0, 8.1, 9.0 |