CVE-2019-9357

CVE-2019-9357 affects libAACdec in Android 10’s Media Framework. An integer overflow can trigger an out-of-bounds write, enabling remote code execution. Exploitation requires user interaction; no privileges beyond the user. Android 10 patch level 2019-09-01 or later mitigates via released securit...

CVE-2019-9344

CVE-2019-9344 affects Android 10 NFC server and involves an out-of-bounds read due to a missing bounds check, enabling local information disclosure. The vulnerability targets NFC server components and can be exploited with user interaction; no remote access is indicated. While NVD lists CVSS scor...

CVE-2019-9348

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-128431761...

CVE-2019-9316

CVE-2019-9316 affects Android’s media stack via the libstagefright component, where a missing variable initialization is cited as the root cause. This flaw could enable remote information disclosure without extra privileges, with user interaction required for exploitation. Affected product is And...

CVE-2019-9333

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109753657...

CVE-2019-9309

CVE-2019-9309 affects Android 10 due to an out-of-bounds write in the NFC handling caused by a missing bounds check. This could enable local elevation of privilege with user interaction required for exploitation. The vulnerability is documented in the Android 10 security release notes and is addr...

CVE-2019-9315

In libhevc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112326216...

CVE-2019-9308

In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661742...

CVE-2019-9334

In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112859934...

CVE-2019-9337

In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112204376...

CVE-2019-9329

In Bluetooth, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure, with no additional privileges required. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112917952...

CVE-2019-9315

CVE-2019-9315 affects the Android 10 Media Framework component libhevc, where a missing variable initialization creates a condition for information disclosure. The issue could permit remote disclosure without additional execution privileges; exploitation requires user interaction. The CVSS data i...

CVE-2019-9335

In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112328051...

CVE-2019-9322

In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111128067...

CVE-2019-9318

In libhevc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111764725...

CVE-2019-9308

CVE-2019-9308 affects Android 10’s libAACdec. The root cause is an out-of-bounds write caused by an integer overflow, enabling remote code execution with no privileges and requiring user interaction to exploit. Remediation is via Android 10 security updates; devices with a patch level of 2019-09-...

CVE-2019-9328

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure, with no additional privileges required. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111895000...

CVE-2019-9310

In libFDK, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112891546...

CVE-2019-9311

In Bluetooth, there is a possible crash due to an integer overflow. This could lead to remote denial of service on incoming calls with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79431031...

CVE-2019-9336

CVE-2019-9336 affects the Android 10 Media framework component libavc. The vulnerability is an information-disclosure flaw caused by uninitialized data, enabling remote information disclosure with no execution privileges needed. Exploitation requires user interaction. The issue is documented in t...