CVE-2019-2211

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-135269669

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Nov 13, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-22125.5In poisson_distribution of random, there is an out of bounds read. This could lead to local information disclosure with no additional executCVE-2019-22137.4In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of pCVE-2019-22147.8In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatioCVE-2019-22157.8A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exCVE-2019-22167.3In overlay notifications, there is a possible hidden notification due to improper input validation. This could lead to a local escalation ofCVE-2019-22177.8In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of prCVE-2019-22187.8In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check. TCVE-2019-22194.7In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background withoCVE-2019-22205.5In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend.CVE-2019-22217.8In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements due to incorrect handCVE-2019-22227.8n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check. This could lead toCVE-2019-22237.8In ihevcd_ref_list of ihevcd_ref_list.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote co
CVE-2019-2211: High severity, CVSS 7.5 | Vulnix