Skip to content
CVE Tracker
Back

CVE-2019-1998

In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local…

Medium5.5EPSS 0.18%
Published
Updated
Reserved
Assigned by
google_android

Description

In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local denial of service that is not fixed by a factory reset, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-116055338.

Scores

CVSS scores of CVE-2019-1998, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0Medium5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.18% · top 93% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

  • Denial of service

Affected products

  • Android · Android

    • affected Android-9

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .