CVE-2019-9252

CVE-2019-9252 affects Android 10, where the libavc component suffers an out-of-bounds read caused by uninitialized data. This leads to remote information disclosure without additional execution privileges; exploitation requires user interaction. Multiple sources (NVD, Red Hat, CVE lists) consiste...

CVE-2019-9252

In libavc there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73339042...

CVE-2019-9253

CVE-2019-9253 affects Android 10 KeyStore: a missing strongbox flag allows symmetric keys to be stored in the TEE instead of the strongbox, enabling local information disclosure with System privileges required. No user interaction needed. Exploitation details are not provided in the supplied docu...

CVE-2019-9272

CVE-2019-9272 is an Android 10 information-disclosure issue described as a WiFi state leak via a permissions bypass, enabling local disclosure of WiFi state and potential device location without user interaction. Documents agree the affected product is Android 10, with no explicit vendor/componen...

CVE-2019-9261

In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116774214...

CVE-2019-9266

CVE-2019-9266 involves an out-of-bounds write in Android’s sensorservice due to a missing bounds check, enabling local privilege escalation with System-level privileges and no user interaction required. Affected software is Android 10; the vulnerability is an Elevation of Privilege (EoP) within t...

CVE-2019-9240

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121150966...

CVE-2019-9243

In wpasupplicant8, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120905706...

CVE-2019-9251

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120274615...

CVE-2019-9247

In AAC Codec, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120426166...

CVE-2019-9241

CVE-2019-9241 affects Android 10 Bluetooth, describing an out-of-bounds read due to a missing bounds check that could enable remote information disclosure with no user interaction or privileges. CVSS indicates network-based exploitation with high confidentiality impact. Remediation is provided by...

CVE-2019-9262

CVE-2019-9262 affects the MPEG4Extractor component in Android 10 media extraction. The issue is an out-of-bounds write caused by an integer overflow in MPEG4Extractor, potentially enabling remote code execution in the media extractor. Exploitation requires user interaction. Impact stated as RCE w...

CVE-2019-9269

In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-36899497...

CVE-2019-9260

In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113495295...

CVE-2019-9235

CVE-2019-9235 affects Android 10 NFC functionality. The issue is an out-of-bounds read caused by a missing bounds check in NFC, enabling local information disclosure with user interaction required for exploitation. Impact is described as partial confidentiality loss with no privilege escalation. ...

CVE-2019-2162

In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112713720...

CVE-2019-2158

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118766492...

CVE-2019-9235

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122323053...

CVE-2019-2165

In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112712154...

CVE-2019-2171

CVE-2019-2171 affects Android 10, specifically the libxaac library, due to uninitialized data leading to information disclosure. The issue allows an attacker to disclose information without extra execution privileges; exploitation requires user interaction. Documents confirm impact on Android-10 ...