CVE-2019-2019

CVE-2019-2019 describes a local information-disclosure vulnerability in Android where, in ce_t4t_data_cback of ce_t4t.cc, an out-of-bounds read can occur due to a missing bounds check. The issue could allow leakage of information without extra execution privileges, requiring user interaction to e...

CVE-2019-2019

In cet4tdatacback of cet4t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1...

CVE-2018-9564

CVE-2018-9564 affects Android via an out-of-bounds read in llcp_util_parse_link_params (llcp_util.cc), caused by a missing bounds check. This can lead to local information disclosure without executing user-supplied code. Affected Android versions include 7.0–9 (Android-7.0, 7.1.1, 7.1.2, 8.0, 8.1...

CVE-2018-9563

CVE-2018-9563 affects Android devices via an out-of-bounds read in llcp_util_parse_cc in llcp_util.cc, leading to local information disclosure. The flaw requires user interaction for exploitation and is tracked across Android versions 7.0–9.0. Public documentation indicates the issue is addressed...

CVE-2019-2017

CVE-2019-2017 : In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check, enabling local elevation of privilege with no additional execution privileges required. Exploitation requires user interaction. Affected are Android versions 7...

CVE-2019-2017

In rwt2thandletlvdetectrsp of rwt2tndef.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...

CVE-2019-2016

In NFASendRawFrame of nfadmapi.cc, there is a possible out-of-bound write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...

CVE-2019-2016

CVE-2019-2016 affects Android: the issue is in NFA_SendRawFrame within nfa_dm_api.cc, where improper input validation can cause an out-of-bounds write. This can lead to local privilege escalation with no additional privileges required, and exploitation requires user interaction. Affected Android ...

CVE-2019-2014

In rwt3thandlegetscpollrsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...

CVE-2019-2014

CVE-2019-2014 is a local elevation-of-privilege vulnerability in Android’s rw_t3t_handle_get_sc_poll_rsp path (rw_t3t.cc), caused by a missing bounds check that can enable an out-of-bounds write. Affected products include Android 7.0–9, with exploitation requiring user interaction. The issue is c...

CVE-2019-2013

CVE-2019-2013 affects Android rw_t3t_act_handle_sro_rsp in rw_t3t.cc, causing a possible out-of-bounds write due to a missing bounds check. This could enable local elevation of privilege with no additional execution privileges needed, and requires user interaction to exploit. Affected Android ver...

CVE-2019-2013

In rwt3tacthandlesrorsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1...

CVE-2019-2012

In rwt3tacthandlefmtrsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1...

CVE-2019-2010

CVE-2019-2010 concerns a local elevation of privilege in Android due to an out-of-bounds write in phNxpNciHal_ext.cc (phNxpNciHal_process_ext_rsp) caused by a missing bounds check. Affected Android versions include 7.0–9.0. The issue enables local exploitation without user interaction and with lo...

CVE-2019-2010

In phNxpNciHalprocessextrsp of phNxpNciHalext.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

SUSE-SU-2019:1522-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode when handling invalid rtree tables bsc1136976. - CVE-2018-8740: Fixed a NULL pointer dereference related to corrupted databases schemas bsc1085790. -...

SUSE SLES11 Security Update : sqlite3 (SUSE-SU-2019:14083-1)

This update for sqlite3 fixes the following issue : Security issue fixed : CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode when handling invalid rtree tables bsc1136976. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

Design/Logic Flaw

Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrago...

CVE-2018-11955

Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrago...

CVE-2018-11955

Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrago...