Browse CVEs

HIGH 7.8 CVE-2019-2120 In OatFileAssistant::GenerateOatFile of oat_file_assistant.cc, there is a possible file corruption issue due to an insecure default value. This could… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2127 In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. This could lead to… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2128 In ACELP_4t64_fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2131 An application with overlay permission can display overlays on top of settings UI. This could lead to local escalation of privilege with no additiona… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2132 It is possible to overlay the VPN dialog by a malicious application. This could lead to local escalation of privilege with no additional execution pr… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2133 In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escala… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.8 CVE-2019-2134 In phFriNfc_ExtnsTransceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.3 CVE-2019-2122 In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference in the handling of the default case between the Win… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.3 CVE-2019-2125 In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502019-08-20 HIGH 7.0 CVE-2019-2121 In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502019-08-20 MEDIUM 6.5 CVE-2019-2129 In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to re… Android Mitigation only Fix from $1,6002019-08-20 MEDIUM 5.5 CVE-2019-14783 On Samsung mobile devices with N(7.x), and O(8.x), P(9.0) software, FotaAgent allows a malicious application to create privileged files. The Samsung … Android No fix yet Fix from $1,6002019-08-08 CRITICAL 9.8 CVE-2019-2111 In loop of DnsTlsSocket.cpp, there is a possible heap memory corruption due to a use after free. This could lead to remote code execution in the netd… Android Mitigation only Fix from $2,3002019-07-08 HIGH 8.8 CVE-2019-2105 In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data. This could lead to remote code exe… Android Mitigation only Fix from $1,9502019-07-08 HIGH 8.8 CVE-2019-2106 In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… Android Mitigation only Fix from $1,9502019-07-08 HIGH 8.8 CVE-2019-2107EPSS 9% In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code … Android No fix yet Fix from $1,9502019-07-08 HIGH 8.8 CVE-2019-2109 In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to … Android Mitigation only Fix from $1,9502019-07-08 HIGH 7.8 CVE-2019-2112 In several functions of alarm.cc, there is possible memory corruption due to a use after free. This could lead to local code execution with no additi… Android Mitigation only Fix from $1,9502019-07-08 HIGH 7.5 CVE-2019-2116 In save_attr_seq of sdp_discovery.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disc… Android Mitigation only Fix from $1,9502019-07-08 MEDIUM 5.5 CVE-2019-2104 In HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are uninitialized fields. This could lead to local infor… Android Mitigation only Fix from $1,6002019-07-08 MEDIUM 5.5 CVE-2019-2113 In setup wizard there is a bypass of some checks when wifi connection is skipped. This could lead to factory reset protection bypass with no addition… Android Mitigation only Fix from $1,6002019-07-08 MEDIUM 5.5 CVE-2019-2117 In checkQueryPermission of TelephonyProvider.java, there is a possible disclosure of secure data due to a missing permission check. This could lead t… Android Mitigation only Fix from $1,6002019-07-08 MEDIUM 5.5 CVE-2019-2118 In various functions of Parcel.cpp, there are uninitialized or partially initialized stack variables. These could lead to local information disclosur… Android Mitigation only Fix from $1,6002019-07-08 MEDIUM 5.5 CVE-2019-2119 In multiple functions of key_store_service.cpp, there is a possible Information Disclosure due to improper locking. This could lead to local informat… Android Mitigation only Fix from $1,6002019-07-08 HIGH 8.8 CVE-2019-2003 In addLinks of Linkify.java, there is a possible phishing vector due to an unusual root cause. This could lead to remote code execution or misdirecti… Android Mitigation only Fix from $1,9502019-06-19 HIGH 8.8 CVE-2019-2018 In resetPasswordInternal of DevicePolicyManagerService.java, there is a possible bypass of password reset protection due to an unusual root cause. Re… Android No fix yet Fix from $1,9502019-06-19 HIGH 7.8 CVE-2019-2017 In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local esc… Android Mitigation only Fix from $1,9502019-06-19 HIGH 7.8 CVE-2019-2023 In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could al… Android Mitigation only Fix from $1,9502019-06-19 HIGH 7.8 CVE-2019-2024 In em28xx_unregister_dvb of em28xx-dvb.c, there is a possible use after free issue. This could lead to local escalation of privilege with no addition… Android Mitigation only Fix from $1,9502019-06-19 HIGH 7.8 CVE-2019-2025 In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in th… Android Mitigation only Fix from $1,9502019-06-19