CVE-2019-9377

CVE-2019-9377 is a local information disclosure vulnerability in the FingerprintService of Android 10, allowing a low-privileged attacker to bypass user profile isolation and access biometric metadata of other users without interaction. The CVSS score of 3.3 (Low) indicates a local attack vector with low complexity and a limited impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.