|
224241
|
7.8 |
HIGH
Local
|
qualcomm
|
mdm9205_firmware mdm9640_firmware msm8996au_firmware qca6574_firmware qcs605_firmware qualcomm_215_firmware sd_425_firmware sd_427_firmware sd_435_firmware sd_439_firmware<…
|
Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-2246
|
2024-11-21 13:40 |
2019-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224242
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local information disclosure with no additional execution privilege…
|
CWE-125 CWE-191
Out-of-bounds Read Integer Underflow (Wrap or Wraparound)
|
CVE-2019-2187
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224243
|
8.8 |
HIGH
Network
|
google
|
android
|
In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. …
|
CWE-787
Out-of-bounds Write
|
CVE-2019-2186
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224244
|
8.8 |
HIGH
Network
|
google
|
android
|
In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-2185
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224245
|
8.8 |
HIGH
Network
|
google
|
android
|
In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution pri…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-2184
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224246
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local information disclosure with no additional…
|
CWE-200
Information Exposure
|
CVE-2019-2183
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224247
|
7.8 |
HIGH
Local
|
google
|
android
|
In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local escalation of privilege with no additiona…
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-2173
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224248
|
7.8 |
HIGH
Local
|
google
|
android
|
In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default permission. This could lead to local escalation of privile…
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-2114
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224249
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a missing permission check. This could lead to local information disclosure with no a…
|
CWE-862
Missing Authorization
|
CVE-2019-2110
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224250
|
7.8 |
HIGH
Local
|
google debian canonical netapp huawei
|
android debian_linux ubuntu_linux cloud_backup steelstore_cloud_integrated_storage service_processor data_availability_services solidfire hci_management_node solidfire_base…
|
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require…
|
CWE-416
Use After Free
|
CVE-2019-2215
|
2024-11-21 13:40 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|