CVE-2019-9358: Out-of-bounds Write

In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to a to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120156401...

PT-2019-19648

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a confused deputy in the Package Manager service, which could lead to the local disclosure of information about installed packages for other users. No additional execution...

CVE-2019-9382: Out-of-bounds Write

In libeffects, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120874654...

PT-2019-16180

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libxaac, which could lead to an out of bounds write. This might result in remote code execution without requiring additional execution privileges. User...

PT-2019-19574

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible information disclosure in libavc due to uninitialized data. This could lead to remote information disclosure without requiring additional execution privileges. User...

CVE-2019-9351: Missing Authorization

In SyncStatusObserver, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to local limited information disclosure with no additional execution privileges needed. User interaction is not needed f...

PT-2019-19639

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a use after free in Bluetooth, which could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for...

PT-2019-19671

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In the Android Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution...

CVE-2019-9323: Missing Authorization

In the Wallpaper Manager service, there is a possible information disclosure due to a missing permission check. Any application can access wallpaper image with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android I...

PT-2019-19464

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in NFC, which could lead to a local information disclosure. This can occur with no additional execution privileges needed, but user interaction is required...

PT-2019-5087

Name of the Vulnerable Software and Affected Versions libvpx affected versions not specified Android versions Android-10 Description The issue is related to a buffer memory out-of-bounds read in the libvpx multimedia library. This could allow a remote attacker to access confidential data. The...

PT-2019-5251

Name of the Vulnerable Software and Affected Versions libvpx versions prior to the fixed version Android versions Android-10 Description The issue is related to insufficient input validation in the libvpx library, which can lead to resource exhaustion. This could result in a remote denial of...

PT-2019-19577

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in libSACdec, which could lead to a possible out of bounds read. This might result in remote information disclosure without requiring additional execution...

CVE-2019-9371: Improper Input Validation

In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254...

PT-2019-19625

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in Bluetooth, which could lead to a possible out of bounds read. This may result in remote information disclosure without requiring additional execution...

PT-2019-19590

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description A missing permission check in the FingerprintService could allow bypassing operating system protections, leading to local information disclosure of metadata about the biometrics of another user on the...

PT-2019-19584

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue concerns the use of an uninitialized variable in Bluetooth, potentially leading to local information disclosure without requiring additional execution privileges. User interaction is not...

PT-2019-19578

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in Bluetooth, which could lead to an out of bounds write. This might result in remote code execution without requiring additional execution privileges...

PT-2019-5096

Name of the Vulnerable Software and Affected Versions libvpx affected versions not specified Android versions Android-10 Description The issue is related to insufficient input validation in the libvpx multimedia library. This could lead to remote information disclosure with no additional executio...

CVE-2019-9253: Insecure Storage of Sensitive Information

In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...