CVE-2019-2221
- EPSS 0.01%
- Veröffentlicht 06.12.2019 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:27
In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements due to incorrect handling of top activities in INITIALIZING state. This could lead to local escalation of privilege with no additio...
CVE-2019-2222
- EPSS 0.67%
- Veröffentlicht 06.12.2019 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:27
n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploita...
CVE-2019-2223
- EPSS 0.67%
- Veröffentlicht 06.12.2019 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:28
In ihevcd_ref_list of ihevcd_ref_list.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Produ...
CVE-2019-2225
- EPSS 0.64%
- Veröffentlicht 06.12.2019 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:28
When pairing with a Bluetooth device, it may be possible to pair a malicious device without any confirmation from the user, and that device may be able to interact with the phone. This could lead to remote escalation of privilege with no additional e...
CVE-2019-2226
- EPSS 0.04%
- Veröffentlicht 06.12.2019 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:28
In device_class_to_int of device_class.cc, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure in the Bluetooth server with User execution privileges needed. User interaction is not needed f...
CVE-2019-2227
- EPSS 0.44%
- Veröffentlicht 06.12.2019 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:28
In DeepCopy of btif_av.cc, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-2228
- EPSS 0.1%
- Veröffentlicht 06.12.2019 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:28
In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed f...
CVE-2019-2229
- EPSS 0.03%
- Veröffentlicht 06.12.2019 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:28
In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for ex...
CVE-2019-2230
- EPSS 1.08%
- Veröffentlicht 06.12.2019 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:28
In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not...
CVE-2019-2231
- EPSS 0.02%
- Veröffentlicht 06.12.2019 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:40:28
In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: ...