PT-2019-19577

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libSACdec, which could lead to a possible out of bounds read. This might result in remote information disclosure without requiring additional execution...

PT-2019-19625

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in Bluetooth, which could lead to a possible out of bounds read. This may result in remote information disclosure without requiring additional execution...

PT-2019-19590

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A missing permission check in the FingerprintService could allow bypassing operating system protections, leading to local information disclosure of metadata about the biometrics of another user on the...

PT-2019-19584

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue concerns the use of an uninitialized variable in Bluetooth, potentially leading to local information disclosure without requiring additional execution privileges. User interaction is not...

PT-2019-19578

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in Bluetooth, which could lead to an out of bounds write. This might result in remote code execution without requiring additional execution privileges...

PT-2019-19473

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in NFC, which could lead to a local information disclosure. This can occur with no additional execution privileges needed, but user interaction is required...

PT-2019-16232

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible information disclosure in libxaac due to uninitialized data. This could lead to information disclosure without requiring additional execution privileges. User interacti...

PT-2019-16237

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to an out of bounds read. This might result in information disclosure without requiring additional execution privileges. User...

PT-2019-19510

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an improper memory allocation in Bluetooth, which could lead to remote code execution with no additional execution privileges needed. User interaction is required for exploitation...

PT-2019-19520

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an integer overflow in libAACdec, which could lead to a possible out of bounds write. This might result in remote code execution without requiring additional execution privileges...

PT-2019-16257

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to an out of bounds read. This might result in information disclosure without requiring additional execution privileges. User...

PT-2019-16178

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to an out of bounds write. This might result in remote code execution without requiring additional execution privileges. User...

PT-2019-19644

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in Bluetooth due to improper input validation. This could lead to remote information disclosure in the Bluetooth server without requiring additional...

CVE-2019-9298: Integer Overflow or Wraparound

In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112892194...

CVE-2019-9281: Improper Limitation of a Pathname to a Restricted Directory

In GoogleContactsSyncAdapter, there is a possible path traversal due to improper input sanitization. This could lead to a bypass of user interaction requirements with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

CVE-2019-9244: Out-of-bounds Read

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120865977...

CVE-2019-9253: Insecure Storage of Sensitive Information

In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

CVE-2019-9261: Out-of-bounds Read

In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116774214...

CVE-2019-9459: Out-of-bounds Write

In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79593569...

CVE-2019-9409: Use of Uninitialized Resource

In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112272091...