CVE-2019-14220 - CVE House
Back to Database
Status published Medium CVE-2019-14220

An issue was discovered in BlueStacks 4.110 and below on...

Vulnerability Description

An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows. BlueStacks employs Android running in a virtual machine (VM) to enable Android apps to run on Windows or MacOS. Bug is in a local arbitrary file read through a system service call. The impacted method runs with System admin privilege and if given the file name as parameter returns you the content of file. A malicious app using the affected method can then read the content of any system file which it is not authorized to read

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-14220

Credits & Attribution

No credits recorded in the NVD database.

References

More from bluestacks

View All →
CVE-2020-24367
Incorrect file permissions in BlueStacks 4 through 4.230 on Windows...
High 7.8
CVE-2019-25293
Blue Stacks App Player 2.4.44.62.57 - "BstHdLogRotatorSvc" Unquote Service Path
High 8.5
CVE-2019-12936
BlueStacks App Player 2, 3, and 4 before 4.90 allows...
High 7.1

Affected Vendor

Affected Software

bluestacks
Vulnerable Versions:
0

Timeline

Official Publish: September 24th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.