CVE-2019-9306

CVE-2019-9306 affects Android 10 Media Framework, specifically the libMpegTPDec component, where an out-of-bounds write caused by an integer overflow could enable remote code execution with user interaction. The issue is documented across multiple sources (NVD/Red Hat/PRION) with the Android bull...

CVE-2019-9293

CVE-2019-9293 affects Android 10, describing an out-of-bounds read in libstagefright due to a missing bounds check. This could allow remote information disclosure with no execution privileges, though exploitation requires user interaction. The vulnerability is documented across multiple sources (...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9251

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120274615...

CVE-2019-9240

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121150966...

CVE-2019-9252

In libavc there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73339042...

CVE-2019-9246

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120428637...

CVE-2019-9242

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121035878...

CVE-2019-9257

In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113572342...

CVE-2019-9265

In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-37994606...

CVE-2019-9250

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120276962...

CVE-2019-9241

CVE-2019-9241 affects Android 10 Bluetooth, describing an out-of-bounds read due to a missing bounds check that could enable remote information disclosure with no user interaction or privileges. CVSS indicates network-based exploitation with high confidentiality impact. Remediation is provided by...

CVE-2019-9258

This CVE-2019-9258 entry concerns Android 10 (wifilogd) with a possible out-of-bounds write due to a missing bounds check, enabling local elevation of privilege without user interaction. The issue affects wifilogd on Android-10 and is described as an out-of-bounds write that could elevate privile...

CVE-2019-9246

CVE-2019-9246 describes an out-of-bounds read in the Android NFC stack due to a missing bounds check. This could allow local information disclosure on affected devices and requires user interaction for exploitation. The vulnerability is associated with Android 10 (Android-10). According to the An...

CVE-2019-9257

CVE-2019-9257 affects Android 10 Bluetooth stack. The flaw is an out-of-bounds write caused by an integer overflow in Bluetooth, enabling local escalation of privilege with no user interaction required. Affected component: Bluetooth handling in Android 10; impact is local attacker privilege escal...

CVE-2019-9260

CVE-2019-9260 affects Android 10 and is a Bluetooth information-disclosure vulnerability caused by an out-of-bounds read from an incorrect bounds check. Exploitation is possible remotely over a network with no user interaction, potentially leading to partial confidentiality loss. NVD metrics show...

CVE-2019-9244

In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120865977...

CVE-2019-9259

In the Bluetooth stack, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113575306...

CVE-2019-9272

CVE-2019-9272 is an Android 10 information-disclosure issue described as a WiFi state leak via a permissions bypass, enabling local disclosure of WiFi state and potential device location without user interaction. Documents agree the affected product is Android 10, with no explicit vendor/componen...