CVE-2019-9405

In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112890225...

CVE-2019-9406

In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112552517...

CVE-2019-9407

In notification management of the service manager, there is a possible permissions bypass. This could lead to local escalation of privilege by preventing user notification, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

CVE-2019-9433

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

CVE-2019-9418

CVE-2019-9418 affects Android 10 via libstagefright, where a missing bounds check can cause resource exhaustion leading to remote DoS with no extra privileges required (user interaction). Connected sources confirm the issue and indicate mitigation through Android 10 patch level 2019-09-01 or late...

CVE-2019-9434

CVE-2019-9434 is a Bluetooth information-disclosure vulnerability in Android 10. It involves an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure with partial confidentiality impact and heap data potentially written to logs. Exploitation reportedly requir...

CVE-2019-9424

In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide the unlock pattern can be ignored. Product: AndroidVersions: Android-10Android ID: A-110941092...

CVE-2019-9433

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

CVE-2019-9409

CVE-2019-9409 affects the Android 10 media processing stack (libhevc). The issue is an information-disclosure vulnerability caused by uninitialized data, enabling remote information disclosure with no execution privileges required. Exploitation requires user interaction. The connected documents r...

CVE-2019-9433

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

CVE-2019-9421

In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111215250...

CVE-2019-9429

CVE-2019-9429 affects the profman component in Android 10. The issue is a memory corruption–related out-of-bounds write that could enable local privilege escalation with no user interaction. Exploitation is described as local; no remote/vector details are provided. Mitigation: apply Android 10 se...

CVE-2019-9413

Summary (CVE-2019-9413) : A Bluetooth component in Android 10 contains an out-of-bounds read due to a missing bounds check, enabling remote information disclosure without extra privileges or user interaction. It is documented with CVSS vectors: CVSS v2 base score 5.0 (Medium) and CVSS v3.1 base s...

CVE-2019-9430

In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109838296...

CVE-2019-9429

In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110035108...

CVE-2019-9434

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with heap information written to the log with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

CVE-2019-9405

CVE-2019-9405 affects libAACdec in Android 10’s Media framework, with an out-of-bounds write caused by an integer overflow. This could permit remote code execution with the attacker needing only user interaction (no additional privileges). The Android 10 security release notes list CVE-2019-9405 ...

CVE-2019-9409

In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112272091...

CVE-2019-9420

In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111272481...

CVE-2019-9408

CVE-2019-9408 affects Android 10 via the libavc component in the Media Framework. Root cause: uninitialized data in libavc can lead to information disclosure. Impact: remote information disclosure without full execution privileges; CVSS notes show confidentiality impact (PARTIAL to HIGH) dependin...