CVE-2019-9262

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111792351

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-92637.8In telephony, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalatCVE-2019-92646.5In libxaac there is a possible out of bounds read due to missing bounds check. This could lead to information disclosure with no additional CVE-2019-92657.5In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure withCVE-2019-92666.7In sensorservice, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wiCVE-2019-92685.5In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the mediaCVE-2019-92697.3In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass withCVE-2019-92707.8In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could leadCVE-2019-92716.4In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which couCVE-2019-92725.5In WiFi, there is a possible leak of WiFi state due to a permissions bypass. This could lead to a local information disclosure which could bCVE-2019-92736.7In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could leaCVE-2019-92746.7In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escaCVE-2019-92756.7In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with S
CVE-2019-9262: High severity, CVSS 8.8 | Vulnix