CVE-2019-2106

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130023983.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jul 8, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-21078.8In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. This could lead to rem CVE-2019-21087.8In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lea CVE-2019-21098.8In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could CVE-2019-21105.5In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a missing permission check CVE-2019-21119.8In loop of DnsTlsSocket.cpp, there is a possible heap memory corruption due to a use after free. This could lead to remote code execution in CVE-2019-21127.8In several functions of alarm.cc, there is possible memory corruption due to a use after free. This could lead to local code execution with CVE-2019-21135.5In setup wizard there is a bypass of some checks when wifi connection is skipped. This could lead to factory reset protection bypass with no CVE-2019-21147.8In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default CVE-2019-21157.8In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double CVE-2019-21167.5In save_attr_seq of sdp_discovery.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote informa CVE-2019-21175.5In checkQueryPermission of TelephonyProvider.java, there is a possible disclosure of secure data due to a missing permission check. This cou CVE-2019-21185.5In various functions of Parcel.cpp, there are uninitialized or partially initialized stack variables. These could lead to local information