CVE-2019-2228

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-111210196

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Dec 6, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-22295.5In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. This could lead to locaCVE-2019-22307.5In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use after free. This couldCVE-2019-22314.4In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local informationCVE-2019-22327.5In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead to remote denial of sCVE-2019-22336.8In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to loCVE-2019-22357.8Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, SnCVE-2019-22365.5Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2019-22375.5Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequCVE-2019-22387.8Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true leadCVE-2019-22395.5Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon ComputeCVE-2019-22405.5While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in SnCVE-2019-22415.5While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done leading to