CVE-2019-9391

In libxaac, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111050781...

CVE-2019-9394

CVE-2019-9394 affects Android 10, with a Bluetooth vulnerability caused by a missing bounds check in a Bluetooth component that allows remote denial of service without user interaction. The issue is listed in multiple sources (Android 10 security release notes and Red Hat advisory) with the same ...

CVE-2019-9381

In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122677612...

CVE-2019-9395

CVE-2019-9395 affects Android 10 Bluetooth. A missing bounds check can cause controlled termination, leading to remote DoS without privileges and without user interaction. Impact: availability loss; threat vector: network. Root cause: out-of-bounds condition in Bluetooth handling. Mitigation: app...

CVE-2019-9382

CVE-2019-9382 affects Android 10 via the libeffects component, where a missing bounds check allows an out-of-bounds write. This could enable remote code execution with the attacker leveraging a vulnerable path in the media stack. Exploitation details in the source documents indicate the issue may...

CVE-2019-9388

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Androi...

CVE-2019-9380

CVE-2019-9380 affects Android 10, specifically a spoofing vulnerability in the Settings UI due to a missing permission check in the Framework. The underlying issue could allow a user to inadvertently change permission settings without additional execution privileges. Exploitation requires user in...

CVE-2019-9395

In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116267405...

CVE-2019-9385

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120452956...

CVE-2019-9397

In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115747410...

CVE-2019-9384

In LockPatternUtils, there is a possible escalation of privilege due to an improper permissions check. This could lead to local bypass of the Lockguard with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:...

CVE-2019-9402

In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115372550...

CVE-2019-9372

In CVE-2019-9372, the issue is in libskia on Android 10 where a missing null check can cause a crash, resulting in remote denial of service. The CVSS metrics indicate NETWORK attack vector, low attack complexity, no privileges required, and user interaction required, with an availability impact o...

CVE-2019-9382

In libeffects, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120874654...

CVE-2019-9388

CVE-2019-9388 affects Android 10 Bluetooth: a missing bounds check causes an out-of-bounds read in the Bluetooth service, enabling remote information disclosure without user interaction. Impact is information disclosure with HIGH/Partial confidentiality impact per CVSS vectors. Exploitation statu...

CVE-2019-9403

In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113512324...

CVE-2019-9378

CVE-2019-9378 affects Android 10 in the Framework/Activity Manager area, where a permission check weakness allows local elevation of privileges without user interaction. The issue enables a bypass of access controls to gain higher privileges on the device, with Local attack vector and no authenti...

CVE-2019-9396

In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115747155...

CVE-2019-9387

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117569833...

CVE-2019-9400

In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115509589...