CVE-2019-2007

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In getReadIndex and getWriteIndex of FifoControllerBase.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-120789744

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jun 19, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-200706.1On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration).CVE-2019-200716.5On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs.CVE-2019-200726.1On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration).CVE-2019-200736.1On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration).CVE-2019-200748.8On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cg CVE-2019-200756.1On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic).CVE-2019-200766.1On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration).CVE-2019-200774.3The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel is not protected by CVE-2019-200797.8The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.CVE-2019-20087.5In createEffect of AudioFlinger.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of p CVE-2019-200829.8ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_LAN_Content.asp.CVE-2019-200857.5TVT NVMS-1000 devices allow GET /.. Directory Traversal