CVE-2019-9443
kernel: out of bounds write due to permission bypass in vl53L0 driver leads to local privilege escalation
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 3, 2019
Updated · June 28, 2026
Description
In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege due to a set_fs() call without restoring the previous limit with System execution privileges needed. User interaction is not needed for exploitation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-787 · Out-of-bounds Write