CVE-2019-9351: Missing Authorization

In SyncStatusObserver, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to local limited information disclosure with no additional execution privileges needed. User interaction is not needed f...

PT-2019-19639

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a use after free in Bluetooth, which could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for...

CVE-2019-2055: Out-of-bounds Write

In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113164693...

PT-2019-19473

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in NFC, which could lead to a local information disclosure. This can occur with no additional execution privileges needed, but user interaction is required...

PT-2019-16232

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible information disclosure in libxaac due to uninitialized data. This could lead to information disclosure without requiring additional execution privileges. User interacti...

PT-2019-16237

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to an out of bounds read. This might result in information disclosure without requiring additional execution privileges. User...

PT-2019-19625

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in Bluetooth, which could lead to a possible out of bounds read. This may result in remote information disclosure without requiring additional execution...

PT-2019-19464

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in NFC, which could lead to a local information disclosure. This can occur with no additional execution privileges needed, but user interaction is required...

CVE-2019-2067: Out-of-bounds Write

In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116114402...

PT-2019-19671

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In the Android Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution...

PT-2019-16178

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to an out of bounds write. This might result in remote code execution without requiring additional execution privileges. User...

PT-2019-19520

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an integer overflow in libAACdec, which could lead to a possible out of bounds write. This might result in remote code execution without requiring additional execution privileges...

CVE-2019-9254

In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-9254

In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-2108

In ihevcdreflist of ihevcdreflist.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

Command injection

In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-2108

CVE-2019-2108 affects Android 10 in the Media framework component. The issue is an out-of-bounds write in ihevcd_ref_list.c caused by a missing bounds check, enabling remote code execution with the attacker needing user interaction. The Android 2019-09-05 patch level (and later) addressing this i...

Google Android Framework elevation of privilege vulnerability (CNVD-2019-30322)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 10. No details of the vulnerability are provided at this time...

Pixel Update Bulletin—September 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2019-09-05 or later address all issues in this bulletin and all issues in the September 2019 Android...

Android Security Bulletin—September 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2019-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...