CVE-2019-9278

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-92797.5In the wifi hotspot service, there is a possible denial of service due to a null pointer dereference. This could lead to remote denial of seCVE-2019-92803.3In keyguard, there is a possible escalation of privilege due to improper permission checks. This could lead to a local bypass of the keyguarCVE-2019-92817.5In GoogleContactsSyncAdapter, there is a possible path traversal due to improper input sanitization. This could lead to a bypass of user intCVE-2019-92826.5In skia, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no addiCVE-2019-92836.5In AAC Codec, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no CVE-2019-92847.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure, with nCVE-2019-92857.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no addiCVE-2019-92867.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2019-92875.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no CVE-2019-92886.8In libhidcommand_jni, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilegCVE-2019-92895.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no CVE-2019-92907.8In tzdata there is possible memory corruption due to a mismatch between allocation and deallocation functions. This could lead to local esca
CVE-2019-9278: High severity, CVSS 8.8 | Vulnix