CVE-2019-9260

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113495295

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Sep 27, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-92616.5In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional CVE-2019-92628.8In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the media CVE-2019-92637.8In telephony, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalat CVE-2019-92646.5In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional CVE-2019-92657.5In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with CVE-2019-92666.7In sensorservice, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi CVE-2019-92685.5In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media CVE-2019-92697.3In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with CVE-2019-92707.8In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could lead CVE-2019-92716.4In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which cou CVE-2019-92725.5In WiFi, there is a possible leak of WiFi state due to a permissions bypass. This could lead to a local information disclosure which could b CVE-2019-92736.7In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could lea