|
221221
|
9.8 |
CRITICAL
Network
|
qualcomm
|
ipq8074_firmware mdm9205_firmware mdm9650_firmware qca8081_firmware qcs605_firmware sd_427_firmware sd_435_firmware sd_450_firmware sd_625_firmware sd_636_firmware sd_66…
|
Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon …
|
CWE-125
Out-of-bounds Read
|
CVE-2019-2249
|
2024-11-21 13:40 |
2019-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221222
|
7.8 |
HIGH
Local
|
qualcomm
|
mdm9205_firmware mdm9640_firmware msm8996au_firmware qca6574_firmware qcs605_firmware qualcomm_215_firmware sd_425_firmware sd_427_firmware sd_435_firmware sd_439_firmware<…
|
Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-2246
|
2024-11-21 13:40 |
2019-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221223
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local information disclosure with no additional execution privilege…
|
CWE-125 CWE-191
Out-of-bounds Read Integer Underflow (Wrap or Wraparound)
|
CVE-2019-2187
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221224
|
8.8 |
HIGH
Network
|
google
|
android
|
In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. …
|
CWE-787
Out-of-bounds Write
|
CVE-2019-2186
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221225
|
8.8 |
HIGH
Network
|
google
|
android
|
In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-2185
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221226
|
8.8 |
HIGH
Network
|
google
|
android
|
In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution pri…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-2184
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221227
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local information disclosure with no additional…
|
CWE-200
Information Exposure
|
CVE-2019-2183
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221228
|
7.8 |
HIGH
Local
|
google
|
android
|
In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local escalation of privilege with no additiona…
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-2173
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221229
|
7.8 |
HIGH
Local
|
google
|
android
|
In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default permission. This could lead to local escalation of privile…
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-2114
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221230
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a missing permission check. This could lead to local information disclosure with no a…
|
CWE-862
Missing Authorization
|
CVE-2019-2110
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|