CVE-2019-9272

In WiFi, there is a possible leak of WiFi state due to a permissions bypass. This could lead to a local information disclosure which could be used to determine device location with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions...

CVE-2019-9237

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121325979...

CVE-2019-9249

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120255805...

CVE-2019-9269

CVE-2019-9269 is an Android 10 elevation-of-privilege issue described as a local permissions bypass in System Settings caused by a cached Linux user ID. The vulnerability could allow a local attacker to bypass permissions with no additional execution privileges required; exploitation reportedly r...

CVE-2019-9240

CVE-2019-9240 affects Android 10 NFC: an out-of-bounds read caused by a missing bounds check could disclose local information. Exploitation requires user interaction; no exploit details or patch information are provided in the connected documents.

CVE-2019-9258

In wifilogd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113655028...

CVE-2019-9264

In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116774502...

CVE-2019-9253

In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

CVE-2019-9272

CVE-2019-9272 is an Android 10 information-disclosure issue described as a WiFi state leak via a permissions bypass, enabling local disclosure of WiFi state and potential device location without user interaction. Documents agree the affected product is Android 10, with no explicit vendor/componen...

CVE-2019-9253

CVE-2019-9253 affects Android 10 KeyStore: a missing strongbox flag allows symmetric keys to be stored in the TEE instead of the strongbox, enabling local information disclosure with System privileges required. No user interaction needed. Exploitation details are not provided in the supplied docu...

CVE-2019-9265

CVE-2019-9265 affects Android 10 Bluetooth, where an incorrect bounds check enables an out-of-bounds read that could disclose information remotely without extra privileges or user interaction. Documented impact is information disclosure; no exploitation details are provided in the available sourc...

CVE-2019-9243

CVE-2019-9243 affects wpa_supplicant_8 in Android 10. The vulnerability is an out-of-bounds read caused by a missing bounds check in a component of wpa_supplicant_8, leading to local information disclosure without requiring privileges; no user interaction is needed. Several connected records corr...

CVE-2019-9249

CVE-2019-9249 refers to a Bluetooth vulnerability in Android 10 where an out-of-bounds read could lead to local information disclosure without privileges or user interaction. The issue arises from a missing bounds check in Bluetooth handling. Impact per sources: potential exposure of partial info...

CVE-2019-9244

CVE-2019-9244 affects Android 10 devices via the NFC component, where a missing bounds check enables an out-of-bounds read and local information disclosure. The issue requires user interaction to exploit and has a Media/Confidentiality impact (C/H) per the CVE details, with CVSSv3.1 base score 5....

CVE-2019-9256

CVE-2019-9256 is a vulnerability in Android’s libmediaextractor. The issue is an out-of-bounds write caused by an integer overflow in the MPEG4Extractor/ media handling within libmediaextractor. It could lead to remote code execution on affected Android 10 devices, with user interaction required ...

CVE-2019-9263

In telephony, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9252

CVE-2019-9252 affects Android 10, where the libavc component suffers an out-of-bounds read caused by uninitialized data. This leads to remote information disclosure without additional execution privileges; exploitation requires user interaction. Multiple sources (NVD, Red Hat, CVE lists) consiste...

CVE-2019-9262

CVE-2019-9262 affects the MPEG4Extractor component in Android 10 media extraction. The issue is an out-of-bounds write caused by an integer overflow in MPEG4Extractor, potentially enabling remote code execution in the media extractor. Exploitation requires user interaction. Impact stated as RCE w...

CVE-2019-9251

CVE-2019-9251 describes an out-of-bounds read in the Android NFC stack due to a missing bounds check, enabling local information disclosure. Exploitation requires user interaction. Affected product/version is Android 10. The vulnerability is documented in the Android 10 Security Release Notes, wh...

CVE-2019-9241

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121036603...