VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 23, 2019· Updated Aug 5, 2024

CVE-2019-1010221

CVE-2019-1010221

Description

LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by adb root can also be set in a normal adb shell session. The component is: adb shell (patches to fix this are at https://review.lineageos.org/c/LineageOS/android_system_core/+/234800, https://review.lineageos.org/c/LineageOS/android_device_lineage_sepolicy/+/234799). The attack vector is: When adb is enabled, and an attacker has physical access, adb shell setprop service.adb.root 1 allows restarting adb as root.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Lineageos/Lineageosllm-fuzzy2 versions
    <=16.0+ 1 more
    • (no CPE)range: <=16.0
    • (no CPE)range: 16.0 and earlier

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.