CVE-2019-9300

In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661610...

CVE-2019-9307

In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661893...

CVE-2019-9286

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111213909...

CVE-2019-9287

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-78287084...

CVE-2019-9293

CVE-2019-9293 affects Android 10, describing an out-of-bounds read in libstagefright due to a missing bounds check. This could allow remote information disclosure with no execution privileges, though exploitation requires user interaction. The vulnerability is documented across multiple sources (...

CVE-2019-9302

In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661356...

CVE-2019-9277

CVE-2019-9277 involves an information disclosure in the Linux proc filesystem on Android 10. The vulnerability allows local disclosure of app and browser activity without user interaction, with exploitation requiring local access and possible user privileges. Root cause is log information disclos...

CVE-2019-9283

CVE-2019-9283 affects the Android 10 AAC Codec, where a vulnerability in input validation can cause resource exhaustion leading to a remote Denial of Service. The impact is DoS with high availability impact, and exploitation requires user interaction. The root cause is improper input validation w...

CVE-2019-9286

CVE-2019-9286 affects Android 10 components via Bluetooth, describing an out-of-bounds read caused by a missing bounds check that could enable remote information disclosure without user interaction. The NVD notes CVSSv3.1 base score 7.5 (HIGH) with network attack vector, no privileges, UI: NONE, ...

CVE-2019-9299

CVE-2019-9299 affects the Android 10 Media Framework (libAACdec). The issue is an out-of-bounds write caused by an integer overflow, potentially enabling remote code execution. Exploitation requires user interaction and can be network-reachable per the CVE details. Remediation is to apply the And...

CVE-2019-9296

CVE-2019-9296 affects Android 10 and is described as an NFC-related out-of-bounds read that can disclose information locally without execution privileges. The root cause is a missing bounds check in NFC handling, with exploitation requiring user interaction. Impact is information disclosure (conf...

CVE-2019-9304

CVE-2019-9304 affects the Android 10 Media Framework, specifically the libMpegTPDec component. The issue is a possible out-of-bounds write caused by an integer overflow in a decoding path, which could enable remote code execution. Exploitation requires user interaction, and the risk is tied to th...

CVE-2019-9306

CVE-2019-9306 affects Android 10 Media Framework, specifically the libMpegTPDec component, where an out-of-bounds write caused by an integer overflow could enable remote code execution with user interaction. The issue is documented across multiple sources (NVD/Red Hat/PRION) with the Android bull...

CVE-2019-9298

CVE-2019-9298 affects Android 10 in the Media Framework (libAACdec). A vulnerability in the library allows an out-of-bounds write caused by an integer overflow, potentially enabling remote code execution. Exploitation requires user interaction. The issue is categorized as RCE with impact to confi...

CVE-2019-9296

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112162089...

CVE-2019-9278

CVE-2019-9278 affects libexif. The vulnerability is an out-of-bounds write caused by an integer overflow in libexif, leading to remote escalation of privilege in the media content provider. Exploitation requires user interaction. Affected versions include Android-10 (and related platforms in the ...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9288

CVE-2019-9288 affects Android 10 via a missing bounds check in libhidcommand_jni, enabling an out-of-bounds write that could cause local elevation of privilege in the USB service without user interaction. Impact is limited to the USB service and requires no additional privileges. Remediation is a...

CVE-2019-9282

CVE-2019-9282 affects Google’s Skia library used in Android 10. The issue is an out-of-bounds read due to a missing bounds check, enabling remote information disclosure with no execution privileges and requiring user interaction to exploit. The Android security release notes indicate fixes are pa...

CVE-2019-9303

CVE-2019-9303 is an Android 10 vulnerability in the libFDK component caused by an integer overflow leading to an out-of-bounds write. The issue could enable remote code execution and is described as requiring user interaction for exploitation (no additional privileges required). The vulnerability...