CVE-2019-2060

CVE-2019-2060 describes an out-of-bounds read vulnerability in the libxaac component of Android 10, stemming from a missing bounds check. This flaw could lead to information disclosure without requiring elevated privileges, though user interaction is necessary for exploitation. Rated as Medium severity with a CVSS score of 6.5, the attack vector is network-based with low attack complexity, and its primary impact is high confidentiality compromise. Currently, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage.