CVE-2019-9377: Missing Authorization

In FingerprintService, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to a local information disclosure of metadata about the biometrics of another user on the device with no additional...

PT-2019-19492

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description There is a possible leak of WiFi state due to a permissions bypass in WiFi, which could lead to a local information disclosure. This disclosure could be used to determine the device location without...

CVE-2019-9435: Out-of-bounds Read

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80146682...

PT-2019-19646

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-10 Description The issue is related to a missing bounds check in Bluetooth, which could lead to a local information disclosure. No additional execution privileges are needed for exploitation, and user...

PT-2019-19515

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in NFC, which could lead to a local information disclosure. This can occur with no additional execution privileges needed, but user interaction is required...

PT-2019-19562

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the m4v h263 codec due to a use after free, which could lead to local information disclosure without requiring additional execution privileges. Us...

PT-2019-19571

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the NFC server due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User...

PT-2019-19508

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to Bluetooth and involves a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed...

PT-2019-19559

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the NFC server due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User...

PT-2019-19583

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-10 Description The issue is related to Bluetooth and involves a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privilege...

CVE-2019-9417: Out-of-bounds Read

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111450079...

CVE-2019-9242: Out-of-bounds Read

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121035878...

PT-2019-19579

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a permissions bypass in the AudioService, which could lead to local information disclosure by playing the background user's audio. No additional execution privileges are needed, a...

PT-2019-19648

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a confused deputy in the Package Manager service, which could lead to the local disclosure of information about installed packages for other users. No additional execution...

CVE-2019-9369: Use of Uninitialized Resource

In Bluetooth, there is a use of uninitialized variable. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79995407...

CVE-2019-9383: Out-of-bounds Read

In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120843827...

PT-2019-19633

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out-of-bounds OOB read due to an integer overflow in libandroidfw. This could lead to local information disclosure with no additional execution privileges needed. User...

CVE-2019-9344: Out-of-bounds Read

In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120845341...

PT-2019-19506

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in Bluetooth, which could lead to a local information disclosure. No additional execution privileges are needed for exploitation, and user interaction is no...

CVE-2018-9581: Exposure of Sensitive Information to an Unauthorized Actor

In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSICHANGE and android.net.wifi.STATECHANGE intents. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...