2019 CVEs (page 74)
Page 74 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-11927 | High | 7.8 | 2019-09-27 | An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags… |
CVE-2019-16927 | Medium | 5.5 | 2019-09-27 | Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019… |
CVE-2019-16688 | Medium | 5.4 | 2019-09-27 | Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.php. A user with no privileges can inject script to attack the admin. (This store… |
CVE-2019-16687 | Medium | 5.4 | 2019-09-27 | Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. A user with the "Create/modify other users, groups and permissions" privile… |
CVE-2019-16686 | Medium | 5.4 | 2019-09-27 | Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin. |
CVE-2019-16685 | Medium | 5.4 | 2019-09-27 | Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php. A user with the "Create/modify other users, groups and permission… |
CVE-2019-9463 | High | 7.3 | 2019-09-27 | In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege w… |
CVE-2019-9462 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9459 | Critical | 9.8 | 2019-09-27 | In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution priv… |
CVE-2019-9440 | Low | 3.3 | 2019-09-27 | In AOSP Email, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of the Email app's protected files with… |
CVE-2019-9438 | Low | 3.3 | 2019-09-27 | In the Package Manager service, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of information about i… |
CVE-2019-9435 | Medium | 5.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executio… |
CVE-2019-9434 | Medium | 4.9 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with heap information writ… |
CVE-2019-9433 | Medium | 6.5 | 2019-09-27 | In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional exe… |
CVE-2019-9432 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth server… |
CVE-2019-9431 | Medium | 4.9 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap information written to… |
CVE-2019-9430 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional executio… |
CVE-2019-9429 | High | 7.8 | 2019-09-27 | In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution pri… |
CVE-2019-9428 | Medium | 6.5 | 2019-09-27 | In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote information disclosure of sensitive URLs wit… |
CVE-2019-9427 | Medium | 5.5 | 2019-09-27 | In Bluetooth, there is a possible information disclosure due to a use after free. This could lead to local information disclosure with no additional execution… |
CVE-2019-9425 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2019-9424 | High | 7.5 | 2019-09-27 | In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide the unlock pattern c… |
CVE-2019-9423 | High | 7.8 | 2019-09-27 | In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with n… |
CVE-2019-9422 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9421 | Medium | 5.0 | 2019-09-27 | In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional execution privileg… |
CVE-2019-9420 | Medium | 6.5 | 2019-09-27 | In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privile… |
CVE-2019-9419 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9418 | Medium | 6.5 | 2019-09-27 | In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execut… |
CVE-2019-9417 | Medium | 5.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executio… |
CVE-2019-9416 | Medium | 6.5 | 2019-09-27 | In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional exe… |
CVE-2019-9415 | Medium | 6.5 | 2019-09-27 | In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional exe… |
CVE-2019-9414 | Medium | 5.9 | 2019-09-27 | In wpa_supplicant, there is a possible man in the middle vulnerability due to improper input validation of the basicConstraints field of intermediary certifica… |
CVE-2019-9413 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9412 | Medium | 6.5 | 2019-09-27 | In libSBRdec there is a possible out of bounds read due to incorrect bounds check. This could lead to remote information disclosure with no additional executio… |
CVE-2019-9411 | Medium | 6.5 | 2019-09-27 | In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution p… |
CVE-2019-9410 | Medium | 6.5 | 2019-09-27 | In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution p… |
CVE-2019-9409 | Medium | 6.5 | 2019-09-27 | In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution… |
CVE-2019-9408 | Medium | 6.5 | 2019-09-27 | In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution p… |
CVE-2019-9407 | High | 7.8 | 2019-09-27 | In notification management of the service manager, there is a possible permissions bypass. This could lead to local escalation of privilege by preventing user… |
CVE-2019-9406 | Medium | 6.5 | 2019-09-27 | In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution… |
CVE-2019-9405 | High | 8.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9404 | High | 7.5 | 2019-09-27 | In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9403 | Medium | 6.5 | 2019-09-27 | In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution privi… |
CVE-2019-9402 | High | 7.5 | 2019-09-27 | In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9401 | High | 7.5 | 2019-09-27 | In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9400 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional executio… |
CVE-2019-9399 | Medium | 5.9 | 2019-09-27 | The Print Service is susceptible to man in the middle attacks due to improperly used crypto. This could lead to remote information disclosure with no additiona… |
CVE-2019-9398 | High | 7.5 | 2019-09-27 | In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9397 | High | 7.5 | 2019-09-27 | In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9396 | High | 7.5 | 2019-09-27 | In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9395 | High | 7.5 | 2019-09-27 | In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9394 | High | 7.5 | 2019-09-27 | In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9393 | High | 7.5 | 2019-09-27 | In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial of service with no additional execution… |
CVE-2019-9391 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges… |
CVE-2019-9390 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2019-9389 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2019-9388 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service w… |
CVE-2019-9387 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9386 | High | 7.3 | 2019-09-27 | In NFC server, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the system server wit… |
CVE-2019-9385 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution… |
CVE-2019-9384 | Medium | 6.7 | 2019-09-27 | In LockPatternUtils, there is a possible escalation of privilege due to an improper permissions check. This could lead to local bypass of the Lockguard with Sy… |
CVE-2019-9383 | Medium | 5.0 | 2019-09-27 | In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executi… |
CVE-2019-9382 | High | 8.8 | 2019-09-27 | In libeffects, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution pri… |
CVE-2019-9381 | High | 7.5 | 2019-09-27 | In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileg… |
CVE-2019-9380 | Medium | 6.5 | 2019-09-27 | In the settings UI, there is a possible spoofing vulnerability due to a missing permission check. This could lead to a user mistakenly changing permission sett… |
CVE-2019-9379 | Medium | 6.5 | 2019-09-27 | In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execut… |
CVE-2019-9378 | High | 7.8 | 2019-09-27 | In the Activity Manager service, there is a possible permission bypass due to incorrect permission check. This could lead to local escalation of privilege with… |
CVE-2019-9377 | Low | 3.3 | 2019-09-27 | In FingerprintService, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check… |
CVE-2019-9376 | Medium | 5.5 | 2019-09-27 | In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local denial of service with no additional execu… |
CVE-2019-9375 | Medium | 6.4 | 2019-09-27 | In hostapd, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges… |
CVE-2019-9373 | Medium | 5.5 | 2019-09-27 | In JobStore, there is a mismatched serialization/deserialization for the "battery-not-low" job attribute. This could lead to a local denial of service with no… |
CVE-2019-9372 | Medium | 6.5 | 2019-09-27 | In libskia, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed… |
CVE-2019-9371 | Medium | 6.5 | 2019-09-27 | In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution p… |
CVE-2019-9370 | Medium | 6.5 | 2019-09-27 | In sonivox, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execut… |
CVE-2019-9369 | Medium | 5.5 | 2019-09-27 | In Bluetooth, there is a use of uninitialized variable. This could lead to local information disclosure with no additional execution privileges needed. User in… |
CVE-2019-9368 | Medium | 5.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executio… |
CVE-2019-9367 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9366 | Medium | 6.5 | 2019-09-27 | In libSBRdec there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executio… |
CVE-2019-9365 | Critical | 9.8 | 2019-09-27 | In Bluetooth, there is a possible deserialization error due to missing string validation. This could lead to remote code execution with no additional execution… |
CVE-2019-9364 | Low | 3.3 | 2019-09-27 | In AudioService, there is a possible trigger of background user audio due to a permissions bypass. This could lead to local information disclosure by playing t… |
CVE-2019-9363 | High | 8.8 | 2019-09-27 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution priv… |
CVE-2019-9362 | Medium | 6.5 | 2019-09-27 | In libSACdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9361 | Medium | 6.5 | 2019-09-27 | In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution p… |
CVE-2019-9360 | Medium | 4.4 | 2019-09-27 | In the TEE, there's a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2019-9359 | Medium | 6.5 | 2019-09-27 | In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution p… |
CVE-2019-9358 | High | 7.3 | 2019-09-27 | In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to a to local escalation of privilege with no additional executi… |
CVE-2019-9357 | High | 8.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9356 | Medium | 5.0 | 2019-09-27 | In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executi… |
CVE-2019-9355 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9354 | Medium | 6.5 | 2019-09-27 | In NFC server, there's a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution priv… |
CVE-2019-9353 | Medium | 6.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2019-9352 | Medium | 6.5 | 2019-09-27 | In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execut… |
CVE-2019-9351 | Low | 3.3 | 2019-09-27 | In SyncStatusObserver, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check… |
CVE-2019-9350 | High | 7.8 | 2019-09-27 | In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed… |
CVE-2019-9349 | Medium | 6.5 | 2019-09-27 | In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2019-9348 | Medium | 6.5 | 2019-09-27 | In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2019-9347 | Medium | 5.5 | 2019-09-27 | In the m4v_h263 codec, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execu… |
CVE-2019-9346 | High | 8.8 | 2019-09-27 | In libstagefright, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution… |
CVE-2019-9344 | Medium | 5.0 | 2019-09-27 | In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executi… |
CVE-2019-9343 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |