CVE-2019-9458: Google Android

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

  • Google Android: affected versions not specified
  • Opensuse Leap: version 15.1 only

Published 2019-09-06. Last modified 2026-06-17.