CVE-2019-9268

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-77474014

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-416CWE-667

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-92697.3In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass withCVE-2019-92707.8In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could leadCVE-2019-92716.4In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which couCVE-2019-92725.5In WiFi, there is a possible leak of WiFi state due to a permissions bypass. This could lead to a local information disclosure which could bCVE-2019-92736.7In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could leaCVE-2019-92746.7In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escaCVE-2019-92756.7In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with SCVE-2019-92766.7In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free. This coulCVE-2019-92773.3In the proc filesystem, there is a possible information disclosure due to log information disclosure. This could lead to local disclosure ofCVE-2019-92788.8In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the medCVE-2019-92797.5In the wifi hotspot service, there is a possible denial of service due to a null pointer dereference. This could lead to remote denial of seCVE-2019-92803.3In keyguard, there is a possible escalation of privilege due to improper permission checks. This could lead to a local bypass of the keyguar
CVE-2019-9268: Medium severity, CVSS 5.5 | Vulnix