PT-2019-19642

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a null pointer dereference in Bluetooth due to a missing null check. This could lead to a remote denial of service, and no additional execution privileges are needed for...

PT-2019-19639

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a use after free in Bluetooth, which could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for...

PT-2019-19643

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read due to a use after free in Bluetooth. This could lead to remote information disclosure with heap information written to the log, requiring System...

PT-2019-19649

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In the AOSP Email application, there is a possible information disclosure issue due to a confused deputy. This could lead to the local disclosure of the Email app's protected files, requiring user...

PT-2019-19668

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a heap buffer overflow in libttspico, which could lead to a possible out-of-bounds OOB write. This might result in remote escalation of privilege without requiring additional...

PT-2019-19671

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In the Android Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution...

CVE-2019-9459: Out-of-bounds Write

In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79593569...

CVE-2019-9462: Out-of-bounds Read

In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-91544774...

CVE-2019-9440: Undefined Security Weakness

In AOSP Email, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of the Email app's protected files with User execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-37637796...

CVE-2019-9438: Undefined Security Weakness

In the Package Manager service, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of information about installed packages for other users with no additional execution privileges needed. User interaction is not needed for exploitation. Product...

CVE-2019-9409: Use of Uninitialized Resource

In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112272091...

CVE-2019-9412: Out-of-bounds Read

In libSBRdec there is a possible out of bounds read due to incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112006096...

CVE-2019-9423: Out-of-bounds Write

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9416: Use of Uninitialized Resource

In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111804142...

CVE-2019-9411: Use of Uninitialized Resource

In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112204845...

CVE-2019-9406: Use of Uninitialized Resource

In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112552517...

CVE-2019-9433: Improper Input Validation

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

CVE-2019-9420: Out-of-bounds Read

In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111272481...

CVE-2019-9417: Out-of-bounds Read

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111450079...

CVE-2019-9415: Use of Uninitialized Resource

In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111805098...