CVE-2019-2194
In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting.
Published Oct 1, 2020 · updated Oct 15, 2026
In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Oct 1, 2020 · OSV.dev
Detected
In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Oct 15, 2026 · OSV.dev
Fix available
platform/frameworks/native fixed in 9:2020-10-01
Oct 15, 2026 · OSV.dev
Fix available
platform/frameworks/native fixed in 9:2020-10-01
Oct 15, 2026 · OSV.dev
Updated
In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
- Android platform/frameworks/native9:0 → 9:2020-10-01