Android Security Bulletin April 2019: CVE-2019-2027/2028 RCE/EoP Vulnerabilities

From the screenshot, the following key information about the vulnerability can be obtained: Android Security Bulletin—April 2019 Publication and Update Dates Published April 1, 2019 Updated April 3, 2019 Vulnerability Details 1. Framework - CVE-2019-2026 - References: A-120866126 - Type: EoP - Severity: High 2. Media framework - CVE-2019-2027 - References: A-119120561 - Type: RCE - Severity: Critical - CVE-2019-2028 - References: A-120644655 - Type: RCE - Severity: Critical 3. System - CVE-2019-2030 - References: A-119496789 - Type: EoP - Severity: High 4. Qualcomm components - CVE-2018-11940 - References: A-79377832 - Type: N/A - Severity: Critical 5. Qualcomm closed-source components - CVE-2018-11271 - References: A-120487384 - Type: N/A - Severity: Critical Common Questions and Answers 1. How do I determine if my device has been updated to address these issues? - You can check your device’s security patch level to determine this. See for steps. 2. Why does this bulletin have two security patch levels? - The two security patch levels provide Android partners with greater flexibility to more quickly fix vulnerabilities affecting all Android devices. 3. What do the entries in the “Type” column of the vulnerability details table indicate? - The entries in the “Type” column indicate the classification of the vulnerability, such as Remote Code Execution (RCE), Elevation of Privilege (EoP), Information Disclosure (ID), etc. Versions Version 1.0 Release Date: April 1, 2019; Description: Bulletin published Version 1.1 Release Date: April 3, 2019; Description: Bulletin revised to include AOSP links

Goal Reached Thanks to every supporter — we hit 100%!

Android Security Bulletin April 2019: CVE-2019-2027/2028 RCE/EoP Vulnerabilities