In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure.
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2019-09-01 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2019-09-05 22:15
Updated : 2024-02-28 17:08
NVD link : CVE-2019-2124
Mitre link : CVE-2019-2124
CVE.ORG link : CVE-2019-2124
JSON object : View
Products Affected
- android
CWE