PT-2019-19639

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a use after free in Bluetooth, which could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for...

PT-2019-19475

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A possible storage issue in KeyStore allows symmetric keys to be stored in the Trusted Execution Environment TEE instead of the strongbox due to a missing strongbox flag. This could lead to local...

PT-2019-19511

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a confused deputy in the Activity Manager service, which could lead to local disclosure of the current foreground process without requiring additional execution privileges. User...

PT-2019-19575

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the TEE due to a missing bounds check. This could lead to local information disclosure, with System execution privileges required for exploitation...

CVE-2019-9347: Out-of-bounds Read

In the m4vh263 codec, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109891727...

PT-2019-19590

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A missing permission check in the FingerprintService could allow bypassing operating system protections, leading to local information disclosure of metadata about the biometrics of another user on the...

PT-2019-19596

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the NFC server due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User...

Microsoft Windows DirectX CVE-2019-1216 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

Microsoft Windows Transaction Manager CVE-2019-1219 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows Graphics Component CVE-2019-1283 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Syste...

Microsoft Windows SMB Client Driver CVE-2019-1293 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows Hyper-V CVE-2019-1254 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10...

DEBIAN-CVE-2019-9455

In the Android kernel in the video driver there is a kernel pointer leak due to a WARNON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-9455

In the Android kernel in the video driver there is a kernel pointer leak due to a WARNON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

Out-of-bounds

In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...

Out-of-bounds

In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-9245

In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-9445

In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...

Design/Logic Flaw

In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...

Out-of-bounds

In the Android kernel in SECTS touch driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...