CVE-2019-9265

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-37994606

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-92666.7In sensorservice, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wiCVE-2019-92685.5In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the mediaCVE-2019-92697.3In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass withCVE-2019-92707.8In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could leadCVE-2019-92716.4In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which couCVE-2019-92725.5In WiFi, there is a possible leak of WiFi state due to a permissions bypass. This could lead to a local information disclosure which could bCVE-2019-92736.7In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could leaCVE-2019-92746.7In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escaCVE-2019-92756.7In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with SCVE-2019-92766.7In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free. This coulCVE-2019-92773.3In the proc filesystem, there is a possible information disclosure due to log information disclosure. This could lead to local disclosure ofCVE-2019-92788.8In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the med
CVE-2019-9265: High severity, CVSS 7.5 | Vulnix