CVE-2019-2071

In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117216549...

CVE-2019-2068

In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117099943...

CVE-2019-2064

In Android 10, CVE-2019-2064 is a vulnerability in the libxaac library where a missing bounds check enables an out-of-bounds write, potentially enabling remote code execution. The issue affects Android-10 devices using libxaac and is documented across multiple sources (NVD entry; Red Hat and CNVD...

CVE-2019-2059

CVE-2019-2059 affects Android 10 in the libxaac library, where a missing bounds check can cause an out-of-bounds write. This vulnerability could enable remote code execution with user interaction required. The issue is documented across multiple sources (e.g., NVD and Red Hat advisories) with And...

CVE-2019-2065

CVE-2019-2065 affects the Android 10 libxaac library, where a missing bounds check enables an out-of-bounds write. This could permit remote code execution over the network with user interaction required. Connected Red Hat and CNVD entries confirm the same description. No concrete patch/version is...

CVE-2019-2071

CVE-2019-2071 affects Android 10 via the libxaac library. The issue is an out-of-bounds write caused by a missing bounds check in libxaac, enabling remote code execution with no required privileges and with user interaction needed to exploit. The impact is consistent with a high-severity remote c...

CVE-2019-2068

CVE-2019-2068 affects Android 10 via libxaac, where an out-of-bounds write due to a missing bounds check could enable remote code execution. Exploitation requires user interaction; the CVSS data indicates network access as a potential vector (NVD) and high impact (RCE) per Android bulletin. Remed...