In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9458
Reference (s):
- https://source.android.com/security/bulletin/pixel/2019-09-01
- SUSE:openSUSE-SU-2020:0543
- URL: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html