Updated libexif packages fix security vulnerability

The updated packages fix a security vulnerability: In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for...

CVE-2019-2036

In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

CVE-2019-2036

CVE-2019-2036 affects Google Android where in HidHostService.java the function okToConnect contains an incorrect state check, enabling a possible permission bypass. This could allow remote escalation of privilege with no additional execution privileges or user interaction required. The vulnerabil...

CVE-2019-2036: Undefined Security Weakness

In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

CVE-2019-9459

In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79593569...

CVE-2019-9459

The CVE-2019-9459 entry concerns the Android 10 library libttspico. A heap buffer overflow leads to an out-of-bounds write, enabling remote escalation of privilege without user interaction. Documents specify the affected component (libttspico), the vulnerability class (OOB write due to a heap ove...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9278

CVE-2019-9278 affects libexif. The vulnerability is an out-of-bounds write caused by an integer overflow in libexif, leading to remote escalation of privilege in the media content provider. Exploitation requires user interaction. Affected versions include Android-10 (and related platforms in the ...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

PT-2019-5083

Name of the Vulnerable Software and Affected Versions libexif affected versions not specified Android versions Android-10 Description The issue is caused by an integer overflow in the libexif library, which is used for parsing EXIF files. This could allow a remote attacker to access confidential...

PT-2019-19668

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a heap buffer overflow in libttspico, which could lead to a possible out-of-bounds OOB write. This might result in remote escalation of privilege without requiring additional...

CVE-2019-9459: Out-of-bounds Write

In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79593569...

The vulnerability of the ADAL.NET library for Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the ADAL.NET library for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

UBUNTU-CVE-2018-6121

Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation via a crafted HTML page...

The vulnerability of the Kubernetes cluster management software, related to improper error handling, allows a perpetrator to escalate their privileges.

The vulnerability of the Kubernetes cluster management software is related to incorrect error handling. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

The vulnerability of the Cisco Elastic Services Controller network management tool, which stems from the use of pre-installed registration data, allows a perpetrator to escalate their privileges.

The vulnerability of the Cisco Elastic Services Controller network management tool is related to the use of pre-installed registration data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Out-of-bounds

In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in systemserver with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

CVE-2019-1986

In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in systemserver with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

CVE-2019-1986: Out-of-bounds Write

In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in systemserver with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...