PT-2019-19639

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a use after free in Bluetooth, which could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for...

PT-2019-19671

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In the Android Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution...

PT-2019-19464

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in NFC, which could lead to a local information disclosure. This can occur with no additional execution privileges needed, but user interaction is required...

PT-2019-19584

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue concerns the use of an uninitialized variable in Bluetooth, potentially leading to local information disclosure without requiring additional execution privileges. User interaction is not...

PT-2019-19578

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in Bluetooth, which could lead to an out of bounds write. This might result in remote code execution without requiring additional execution privileges...

PT-2019-19625

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in Bluetooth, which could lead to a possible out of bounds read. This may result in remote information disclosure without requiring additional execution...

CVE-2019-9433: Improper Input Validation

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

PT-2019-19591

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible permission bypass in the Activity Manager service due to an incorrect permission check. This could lead to local escalation of privilege without requiring additional...

CVE-2019-9325: Out-of-bounds Read

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112001302...

CVE-2019-9278: Integer Overflow or Wraparound

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

PT-2019-16237

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to an out of bounds read. This might result in information disclosure without requiring additional execution privileges. User...

CVE-2019-9406: Use of Uninitialized Resource

In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112552517...

CVE-2019-9282: Out-of-bounds Read

In skia, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113211371...

CVE-2019-9348: Improper Input Validation

In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-128431761...

CVE-2019-9335: Use of Uninitialized Resource

In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112328051...

CVE-2019-9302: Integer Overflow or Wraparound

In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661356...

CVE-2019-9308: Integer Overflow or Wraparound

In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661742...

CVE-2019-9303: Integer Overflow or Wraparound

In libFDK, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661057...

CVE-2019-9440: Undefined Security Weakness

In AOSP Email, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of the Email app's protected files with User execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-37637796...

CVE-2019-9429: Out-of-bounds Write

In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110035108...