Government of the Republic of Trinidad and Tobago                                                                                                                                        


News

TTCSIRT-216.070919: TT-CSIRT Advisory – Android Security Updates

9th July 2019

Google has released a security update stating that it has found the following issues in the Android OS:

a) Framework vulnerability enable a local malicious application to bypass user interaction requirements in order to gain access to additional permissions – (CVE-2019-2104).

b) Library vulnerability enable a remote attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process – (CVE-2019-2105).

c) System vulnerability enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process – (CVE-2019-2111).

Further information on these vulnerabilities and how they can be mitigated can be found on the Android Website at https://source.android.com/security/bulletin/2019-07-01.html