medium5.5
CVE-2019-2196
In Download Provider, there is possible SQL injection.
Impact
In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-135269143
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 8.0, 8.1, 9.0, 10.0 |