CVE-2019-9406
- EPSS 0.24%
- Veröffentlicht 27.09.2019 19:15:26
- Zuletzt bearbeitet 21.11.2024 04:51:34
In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: A...
CVE-2019-9407
- EPSS 0.01%
- Veröffentlicht 27.09.2019 19:15:26
- Zuletzt bearbeitet 21.11.2024 04:51:35
In notification management of the service manager, there is a possible permissions bypass. This could lead to local escalation of privilege by preventing user notification, with no additional execution privileges needed. User interaction is not neede...
CVE-2019-9376
- EPSS 0.02%
- Veröffentlicht 27.09.2019 19:15:25
- Zuletzt bearbeitet 21.11.2024 04:51:31
In Account of Account.java, there is a possible boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android; V...
CVE-2019-9377
- EPSS 0.01%
- Veröffentlicht 27.09.2019 19:15:25
- Zuletzt bearbeitet 21.11.2024 04:51:31
In FingerprintService, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to a local information disclosure of metadata about the biometrics of ano...
CVE-2019-9378
- EPSS 0.01%
- Veröffentlicht 27.09.2019 19:15:25
- Zuletzt bearbeitet 21.11.2024 04:51:31
In the Activity Manager service, there is a possible permission bypass due to incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-9379
- EPSS 0.35%
- Veröffentlicht 27.09.2019 19:15:25
- Zuletzt bearbeitet 21.11.2024 04:51:31
In libstagefright, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersion...
CVE-2019-9380
- EPSS 0.08%
- Veröffentlicht 27.09.2019 19:15:25
- Zuletzt bearbeitet 21.11.2024 04:51:32
In the settings UI, there is a possible spoofing vulnerability due to a missing permission check. This could lead to a user mistakenly changing permission settings with no additional execution privileges needed. User interaction is needed for exploit...
CVE-2019-9381
- EPSS 0.37%
- Veröffentlicht 27.09.2019 19:15:25
- Zuletzt bearbeitet 21.11.2024 04:51:32
In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Andro...
CVE-2019-9382
- EPSS 0.41%
- Veröffentlicht 27.09.2019 19:15:25
- Zuletzt bearbeitet 21.11.2024 04:51:32
In libeffects, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Andr...
- EPSS 0.02%
- Veröffentlicht 27.09.2019 19:15:25
- Zuletzt bearbeitet 21.11.2024 04:51:32
In NFC server, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions...