CVE-2019-2146

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112859714...

CVE-2019-2147

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116474108...

CVE-2019-2072

CVE-2019-2072 affects Android 10 through the libxaac library. The issue is an out-of-bounds write caused by a missing bounds check in libxaac, enabling remote code execution with the attacker’s interaction required. Impact is described as RCE with high severity under CVSS 3.1 (HIGH, network attac...

CVE-2019-2074

This entry concerns CVE-2019-2074 affecting libxaac in Android 10. The issue is an out-of-bounds write due to a missing bounds check, enabling remote code execution. Impact: remote code execution with user interaction required, configured as HIGH in CVSS 3.1. Affected component: libxaac in Androi...

CVE-2019-2073

CVE-2019-2073 affects the Android 10 libxaac library, where an out-of-bounds write occurs due to a missing bounds check. This can lead to remote code execution with network access and no extra privileges, with user interaction required for exploitation. The vulnerability is documented across seve...

CVE-2019-2076

CVE-2019-2076 affects libxaac on Android 10. It is an out-of-bounds write due to a missing bounds check, enabling remote code execution with no additional privileges; user interaction is required for exploitation. The issue is cited across multiple sources (NVD, Red Hat, CNVD) and is referenced i...

CVE-2019-2077

CVE-2019-2077 affects Android 10’s libxaac, where a missing bounds check enables an out-of-bounds write, potentially allowing remote code execution. Evidence across sources (NVD/Red Hat/CNVD) confirms the vulnerability involves libxaac and Android 10, with exploitation requiring user interaction ...

CVE-2019-2078

CVE-2019-2078 is a vulnerability in the libxaac library used by Android 10. It arises from a missing bounds check causing an out-of-bounds write, potentially enabling remote code execution. Exploitation would require user interaction. Multiple connected sources (e.g., Red Hat and CNVD records) co...

CVE-2019-2080

CVE-2019-2080 concerns a possible out-of-bounds write in libxaac on Android 10, caused by a missing bounds check. The issue could enable remote code execution with no privileges and requires user interaction to exploit. Connected sources (including NVD and Red Hat) confirm libxaac as the vulnerab...

CVE-2019-2085

Summary: CVE-2019-2085 is an out-of-bounds write in libxaac on Android 10 due to a missing bounds check, enabling remote code execution with user interaction required. The issue is tied to the Android 10 libxaac/Android-10 stack, with a high impact and network attack vector per CVE details. Affec...

CVE-2019-2087

CVE-2019-2087 affects Android 10 libxaac. Root cause: out-of-bounds write from a missing bounds check, enabling remote code execution with no privileges and requiring user interaction. Mitigation: apply patches as part of Android 10 updates; devices with a security patch level of 2019-09-01 or la...

CVE-2019-2139

CVE-2019-2139 affects Android 10’s libxaac, where a missing bounds check allows an out-of-bounds read that can disclose information. Exploitation requires user interaction; no root privileges are indicated. The connected documents confirm the vulnerable component and impact but do not specify a p...

CVE-2019-2140

CVE-2019-2140 affects libxaac in Android 10, stemming from uninitialized data that can cause information disclosure. Impact: partial confidentiality loss with no full compromise; exploitation requires user interaction. Affected component is libxaac in Android 10, with Android’s release notes indi...

CVE-2019-2141

The CVE-2019-2141 issue affects Android 10, specifically the libxaac library. The root cause is an out-of-bounds write due to a missing bounds check in libxaac, which could enable remote code execution. The vulnerability is described as requiring user interaction for exploitation and having poten...

CVE-2019-2142

The CVE-2019-2142 entry affects Android 10, specifically the libxaac library. The vulnerability is an information-disclosure flaw caused by a missing bounds check that could trigger an out-of-bounds read. Exploitation requires user interaction, and successful exploitation could disclose partial t...

CVE-2019-2143

CVE-2019-2143 affects Android 10, in the libxaac library. The issue is an out-of-bounds read caused by a missing bounds check, leading to potential information disclosure. Exploitation requires user interaction, and the description does not indicate remote execution or other privileges. Connected...

CVE-2019-2145

CVE-2019-2145 is a vulnerability in the Android libxaac library (Android-10) causing an information-disclosure via an out-of-bounds read due to missing bounds checks. The exploit requires user interaction and could allow partial confidentiality impact, with higher impact if exploited in context. ...

CVE-2019-2146

CVE-2019-2146 affects Android 10, with a vulnerability in libxaac caused by a missing bounds check that leads to an out-of-bounds read. Consequence: information disclosure without execution privileges; exploitation requires user interaction. Affected component: libxaac (Android 10). Vendor/OS con...

CVE-2019-2149

CVE-2019-2149 affects the libxaac component in Android 10. The issue is an out-of-bounds read caused by a missing bounds check, leading to potential information disclosure. Exploitation requires user interaction. Multiple sources (Android NVD entry, Red Hat, CNVD, etc.) corroborate this vulnerabi...

CVE-2019-2084

The CVE-2019-2084 issue affects the libxaac library in Android 10. It is caused by a missing bounds check that allows an out‑of‑bounds write, enabling remote code execution. Exploitation requires user interaction. The vulnerability impacts Android 10 devices with libxaac, and multiple connected s...