CVE-2019-9429: Out-of-bounds Write

In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110035108...

CVE-2019-9391: Out-of-bounds Read

In libxaac, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111050781...

CVE-2019-9420: Out-of-bounds Read

In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111272481...

CVE-2019-9383: Out-of-bounds Read

In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120843827...

CVE-2019-9372: Unchecked Return Value

In libskia, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132782448...

PT-2019-5091

Name of the Vulnerable Software and Affected Versions libvpx versions prior to the fixed version Android versions Android-10 Description The issue is related to a missing bounds check in libvpx, which could lead to a possible out of bounds read. This may result in remote information disclosure...

CVE-2019-9314: Missing Initialization of Resource

In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112329563...

CVE-2019-9316: Missing Initialization of Resource

In libstagefright, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112052432...

CVE-2019-9318: Missing Initialization of Resource

In libhevc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111764725...

CVE-2019-9319: Missing Initialization of Resource

In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111762100...

CVE-2019-9321: Missing Initialization of Resource

In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111208713...

PT-2019-19537

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in libhevc, which could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessary fo...

PT-2019-19469

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in the AAC Codec. This could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessa...

PT-2019-19538

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in libavc. This could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessary for...

PT-2019-19534

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in libhevc, which could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessary fo...

CVE-2019-9320: Missing Initialization of Resource

In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111761624...

PT-2019-19533

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing variable initialization in libavc. This could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessary for...

PT-2019-16246

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to an out of bounds read. This might result in information disclosure without requiring additional execution privileges. User...

PT-2019-16174

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to an out of bounds write. This might result in remote code execution without requiring additional execution privileges. User...

PT-2019-19604

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to an out of bounds read in libxaac due to uninitialized data, potentially leading to information disclosure without requiring additional execution privileges. User interaction is...