CVE-2019-9257

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113572342

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-92587.8In wifilogd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with noCVE-2019-92596.7In the Bluetooth stack, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege wiCVE-2019-92607.5In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure withCVE-2019-92616.5In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional CVE-2019-92628.8In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the mediaCVE-2019-92637.8In telephony, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalatCVE-2019-92646.5In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional CVE-2019-92657.5In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure withCVE-2019-92666.7In sensorservice, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wiCVE-2019-92685.5In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the mediaCVE-2019-92697.3In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass withCVE-2019-92707.8In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could lead
CVE-2019-9257: High severity, CVSS 7.8 | Vulnix