3563 matches found
CVE-2019-2145: Out-of-bounds Read
In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112858430...
CVE-2019-2077: Out-of-bounds Write
In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-114745929...
CVE-2019-2055: Out-of-bounds Write
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113164693...
CVE-2019-2064: Out-of-bounds Write
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116469592...
CVE-2019-2140: Use of Uninitialized Resource
In libxaac, there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112705708...
CVE-2019-9371: Improper Input Validation
In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254...
PT-2019-19460
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the NFC stack, which could lead to a possible out of bounds write. This might result in local escalation of privilege, requiring System execution...
PT-2019-19629
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in Bluetooth, which could lead to a local information disclosure. No additional execution privileges are needed, and user interaction is not required for...
CVE-2019-2167: Use of Uninitialized Resource
In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118615501...
PT-2019-19590
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A missing permission check in the FingerprintService could allow bypassing operating system protections, leading to local information disclosure of metadata about the biometrics of another user on the...
CVE-2019-9234: Out-of-bounds Read
In wpasupplicant8, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122465453...
CVE-2019-9415: Use of Uninitialized Resource
In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111805098...
PT-2019-19562
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in the m4v h263 codec due to a use after free, which could lead to local information disclosure without requiring additional execution privileges. Us...
PT-2019-16232
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible information disclosure in libxaac due to uninitialized data. This could lead to information disclosure without requiring additional execution privileges. User interacti...
PT-2019-19527
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an integer overflow in libAACdec, which could lead to a possible out of bounds write. This might result in remote code execution without requiring additional execution privileges...
PT-2019-11155
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 Description: The issue is related to a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege with no additional execution privileges...
PT-2019-16177
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to a possible out of bounds write. This might result in remote code execution without requiring additional execution privileges...
PT-2019-19485
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in libxaac due to a missing bounds check. This could lead to information disclosure without requiring additional execution privileges. User interacti...
PT-2019-19514
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing permission check in the com.android.apps.tag component, which could allow for a bypass of user interaction requirements. This might lead to a local escalation of...
PT-2019-19648
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a confused deputy in the Package Manager service, which could lead to the local disclosure of information about installed packages for other users. No additional execution...