CVE-2019-2232

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead to remote denial of service when processing Unicode with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140632678

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20CWE-682

Affected software

No affected versions have been published.

Timeline

Published
Dec 6, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-22336.8In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to loCVE-2019-22357.8Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, SnCVE-2019-22365.5Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2019-22375.5Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequCVE-2019-22387.8Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true leadCVE-2019-22395.5Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon ComputeCVE-2019-22405.5While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in SnCVE-2019-22415.5While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done leading toCVE-2019-22429.8Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer ElectronicCVE-2019-22435.5Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure. in Snapdragon Auto,CVE-2019-22449.8Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to rCVE-2019-22459.8Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to rea