PT-2019-19593

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible spoofing vulnerability in the settings UI due to a missing permission check. This could lead to a user mistakenly changing permission settings without needing additiona...

PT-2019-5251

Name of the Vulnerable Software and Affected Versions libvpx versions prior to the fixed version Android versions Android-10 Description The issue is related to insufficient input validation in the libvpx library, which can lead to resource exhaustion. This could result in a remote denial of...

CVE-2019-9278: Integer Overflow or Wraparound

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

PT-2019-16171

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to an out of bounds write. This might result in remote code execution without requiring additional execution privileges. User...

PT-2019-19469

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in the AAC Codec. This could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessa...

PT-2019-19460

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the NFC stack, which could lead to a possible out of bounds write. This might result in local escalation of privilege, requiring System execution...

PT-2019-5096

Name of the Vulnerable Software and Affected Versions libvpx affected versions not specified Android versions Android-10 Description The issue is related to insufficient input validation in the libvpx multimedia library. This could lead to remote information disclosure with no additional executio...

CVE-2019-9433: Improper Input Validation

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

PT-2019-5091

Name of the Vulnerable Software and Affected Versions libvpx versions prior to the fixed version Android versions Android-10 Description The issue is related to a missing bounds check in libvpx, which could lead to a possible out of bounds read. This may result in remote information disclosure...

PT-2019-5087

Name of the Vulnerable Software and Affected Versions libvpx affected versions not specified Android versions Android-10 Description The issue is related to a buffer memory out-of-bounds read in the libvpx multimedia library. This could allow a remote attacker to access confidential data. The...

CVE-2019-9232: Out-of-bounds Read

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483...

CVE-2019-9234: Out-of-bounds Read

In wpasupplicant8, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122465453...

CVE-2019-9254

In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-9254

In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-2108

In ihevcdreflist of ihevcdreflist.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

Command injection

In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-2108

CVE-2019-2108 affects Android 10 in the Media framework component. The issue is an out-of-bounds write in ihevcd_ref_list.c caused by a missing bounds check, enabling remote code execution with the attacker needing user interaction. The Android 2019-09-05 patch level (and later) addressing this i...

Google Android Framework elevation of privilege vulnerability (CNVD-2019-30322)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 10. No details of the vulnerability are provided at this time...

Pixel Update Bulletin—September 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2019-09-05 or later address all issues in this bulletin and all issues in the September 2019 Android...

Android Security Bulletin—September 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2019-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...