3563 matches found
CVE-2019-9416
In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111804142...
CVE-2019-9418
CVE-2019-9418 affects Android 10 via libstagefright, where a missing bounds check can cause resource exhaustion leading to remote DoS with no extra privileges required (user interaction). Connected sources confirm the issue and indicate mitigation through Android 10 patch level 2019-09-01 or late...
CVE-2019-9405
In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112890225...
CVE-2019-9431
In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap information written to the log with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...
CVE-2019-9413
Summary (CVE-2019-9413) : A Bluetooth component in Android 10 contains an out-of-bounds read due to a missing bounds check, enabling remote information disclosure without extra privileges or user interaction. It is documented with CVSS vectors: CVSS v2 base score 5.0 (Medium) and CVSS v3.1 base s...
CVE-2019-9417
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111450079...
CVE-2019-9421
CVE-2019-9421 affects the Android framework library libandroidfw, with an out-of-bounds read caused by an integer overflow . The issue enables a potential local information disclosure vulnerability and, per the sources, requires some user interaction to exploit. The vulnerability entry lists affe...
CVE-2019-9421
In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111215250...
CVE-2019-9424
In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide the unlock pattern can be ignored. Product: AndroidVersions: Android-10Android ID: A-110941092...
CVE-2019-9429
In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110035108...
CVE-2019-9428
In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote information disclosure of sensitive URLs with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID:...
CVE-2019-9431
CVE-2019-9431 describes a Bluetooth vulnerability in Android 10: a use-after-free leads to an out-of-bounds read, enabling remote information disclosure. The issue can disclose heap information and requires no user interaction, with potential system-level privileges needed for impact per public r...
CVE-2019-9415
In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111805098...
CVE-2019-9410
In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112204443...
CVE-2019-9417
CVE-2019-9417 is a Bluetooth vulnerability in Android 10 where an out-of-bounds read can disclose information locally without user interaction due to a missing bounds check. Exploitation requires local access; impact is information disclosure with no execution privileges gained. Public references...
CVE-2019-9434
CVE-2019-9434 is a Bluetooth information-disclosure vulnerability in Android 10. It involves an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure with partial confidentiality impact and heap data potentially written to logs. Exploitation reportedly requir...
CVE-2019-9406
CVE-2019-9406 affects libhevc in Android 10. The vulnerability enables information disclosure via uninitialized data within the Media/Video processing path, potentially allowing remote information disclosure without extra execution privileges. Exploitation is described as requiring user interacti...
CVE-2019-9405
CVE-2019-9405 affects libAACdec in Android 10’s Media framework, with an out-of-bounds write caused by an integer overflow. This could permit remote code execution with the attacker needing only user interaction (no additional privileges). The Android 10 security release notes list CVE-2019-9405 ...
CVE-2019-9419
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111407544...
CVE-2019-9423
The CVE-2019-9423 entry concerns an out-of-bounds write in OpenCV when using libpng, caused by a missing bounds check. Impact is local privilege escalation on Android 10, with no user interaction required. Public details specify the affected product as Android 10 (Android ID A-110986616); there i...