CVE-2019-1411

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1432.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Nov 12, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-141109.8Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer CVE-2019-141119.8Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon ConCVE-2019-141129.8Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon CompuCVE-2019-141139.8Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in SnapdrCVE-2019-141149.8Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, SnapdraCVE-2019-141155.5u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result CVE-2019-141167.8Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during theCVE-2019-141177.8u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which resultCVE-2019-141197.0u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory coCVE-2019-14125.5An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objectCVE-2019-141227.8Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major memory fragmentatioCVE-2019-141237.8Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-tru
CVE-2019-1411: Medium severity, CVSS 6.5 | Vulnix