CVE-2019-9380 is a medium-severity spoofing vulnerability affecting Android 10, specifically within the settings user interface. It stems from a missing permission check, allowing a user to mistakenly alter permission settings without requiring elevated execution privileges. Exploitation necessitates user interaction, but no additional execution privileges are needed. The vulnerability has a CVSS v3.1 score of 6.5, indicating a medium severity. Its attack vector is network-based with low attack complexity, requiring user interaction to achieve high integrity impact but no confidentiality or availability impact. Currently, there is no evidence of active exploitation, nor are there any publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community attention, with no social media discussion or media coverage reported.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
10.0CPE matchmatch criteria | cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.